CVE-2024-42471

This exploit demonstrates an arbitrary file write vulnerability in unzip-stream 0.3.1 by crafting a malicious ZIP file with a path traversal payload in the arcname parameter. It bypasses Python's zipfile module restrictions to achieve directory traversal during extraction.

This PoC demonstrates a directory traversal vulnerability in unzip-stream 0.3.1, allowing arbitrary file write/overwrite via a maliciously crafted ZIP archive. The exploit leverages Python's zipfile module to create a ZIP with a path traversal payload.