Exploitation Summary
EIP tracks 2 public exploits for CVE-2024-42471. PoCs published by cybersploit, theMcSam.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file write vulnerability in unzip-stream 0.3.1 by crafting a malicious ZIP file with a path traversal payload in the arcname parameter. It bypasses Python's zipfile module restrictions to achieve directory traversal during extraction.
Description
actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of `actions/artifact` on the 2.x branch before 2.1.2 are vulnerable to arbitrary file write when using `downloadArtifactInternal`, `downloadArtifactPublic`, or `streamExtractExternal` for extracting a specifically crafted artifact that contains path traversal filenames. Users are advised to upgrade to version 2.1.2 or higher. There are no known workarounds for this issue.
Exploits (2)
This exploit demonstrates an arbitrary file write vulnerability in unzip-stream 0.3.1 by crafting a malicious ZIP file with a path traversal payload in the arcname parameter. It bypasses Python's zipfile module restrictions to achieve directory traversal during extraction.
This PoC demonstrates a directory traversal vulnerability in unzip-stream 0.3.1, allowing arbitrary file write/overwrite via a maliciously crafted ZIP archive. The exploit leverages Python's zipfile module to create a ZIP with a path traversal payload.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N