Arbitrary file overwrites in `node-tar`
该报告还没有中文解读。
原文摘录
摘自原文（2175 字符中的一小部分）
I was looking for vulnerabilities in a different tar library, `tar-fs`, and discovered a bug that allowed me to overwrite arbitrary files on the host system using its default extraction method. After reporting the bug to the maintainer of `tar-fs`, Mathias Buus, he realized that `node-tar` was …
原文中的代码
tar = require('tar')
tar.x(
{
file: 'hardlink_exploit.tar.gz'
}
).then(_=> { console.log("done") })默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Node.js third-party modules 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @max · 版权归作者与 Node.js third-party modules 所有