Hugo van Kemenade

Extraction filter bypass for linking outside extraction directory

Arbitrary writes via tarfile realpath overflow

Bypass extraction filter to modify file metadata outside extraction directory

Tarfile extracts filtered members when errorlevel=0

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory