VulnSocial

CVE-2024-12905Patch

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-02: 1Patch / Workaround · 2026-06-02: 1Technical Details · 2026-06-02: 106-02
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ThreatCluster@threatcluster
    Patch

    BREAKING: Ubuntu and Mageia patch tar flaws CVE-2024-12905, CVE-2025-48387, CVE-2025-59343, CVE-2026-5704 letting remote attackers overwrite files and inject hidden content via malicious archives. https://threatcluster.io/cluster/multiple-cves-discovered-in-tar-affecting-ubuntu-and-mageia--167df302

    Post summary

    The post announces that Ubuntu and Mageia have released patches for four CVEs impacting tar, which allow remote file overwrite and hidden content injection via malicious archives.

    0000059
    294 followersView on X

Explore more

Back to dashboard