csirttrizna/cve-2024-55587Proof-of-concept exploit for CVE-2024-55587 in libarchive, demonstrating unsafe extraction via malicious ZIP files.
This repository is proof of concept for CVE-2024-55587 vulnerability in python library libarchive. The generate_zip file creates malicious zip that will exploit u safe extraction of files in libarchive extractall method. The vulnerable_zip is just an exaple of vulnerable code.
