CVE-2023-37460

CVE-2023-37460 is a critical vulnerability affecting Plexus Archiver versions prior to 4.8.0, allowing arbitrary file creation and potential remote code execution during archive extraction. This flaw arises from improper handling of symbolic links, where an attacker can craft an archive to write content outside the intended directory. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there are no known public exploits or Metasploit modules, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.