CVE-2022-30333
- Reference to the description:
- Description:
- RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
- Last updated date:
- 09/17/2023
Reports
ACTIVELY EXPLOITED
- Type:
- exploitation
- Confidence:
- HIGH
- Date of publishing:
- 08/09/2022
- Reference url to background
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 07/05/2022
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 07/15/2022
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 07/26/2022
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 08/01/2022
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 08/04/2022
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/26/2022
- Reference url to background
http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/26/2022
- Reference url to background
https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/