CVE-2022-30333
KEV RANSOMWAREHIGH 7.5EPSS 99.1%
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
- CVSS v3.1
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS v3.1
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 99.09% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-08-09, used in ransomware campaigns
- Published
- 2022-05-09
- Updated
- 2026-08-04
Proof-of-concept exploits (7)
- http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html
- https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/
- TheL1ghtVn/CVE-2022-30333-PoC13★ · 2022-07-05
- aslitsecurity/Zimbra-CVE-2022-303337★ · 2022-07-26
- paradox0909/cve-2022-30333_online_rar_extracor0★ · 2024-06-10
- rbowes-r7/unrar-cve-2022-30333-poc14★ · 2022-07-18
- RakhithJK/CVE-2022-30333