Vulnerability identifier: #VU62908

Vulnerability risk: Low

CVSSv3.1: 4.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:H/RL:O/RC:C]

CVE-ID: CVE-2022-30333

CWE-ID: CWE-22

Exploitation vector: Network

Exploits in database: 7

• August 9, 2022
  • Zimbra UnRAR Path Traversal [Packet Storm]
• August 4, 2022
  • UnRAR Path Traversal in Zimbra (CVE-2022-30333) [Metasploit]
  • UnRAR Path Traversal (CVE-2022-30333) [Metasploit]
• July 26, 2022
  • Zimbra-CVE-2022-30333 (Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.) [Github]
• July 24, 2022
  • CVE-2022-30333 () [Github]
• July 18, 2022
  • unrar-cve-2022-30333-poc () [Github]
• July 5, 2022
  • CVE-2022-30333-PoC () [Github]

Impact: Data manipulation

Vulnerable software:
UnRar
Client/Desktop applications / Software for archiving

Vendor: RARLAB