CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2022-303337.5/HIGHEPSS 99.2%CISA KEV
2022-05-09

RARLAB UnRAR Directory Traversal Vulnerability (CVE-2022-30333) Technical Analysis and Mitigation Guide

[Affected Scope] RARLAB UnRAR utility versions prior to 6.12 on Linux and UNIX platforms.

[Impact] Attackers can exploit this vulnerability to write arbitrary files outside the extraction directory, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade UnRAR to version 6.12 or later, and apply security patches to integrated applications like Zimbra.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse