Exploit for #VU62908 Path traversal in UnRar

Vulnerability identifier: #VU62908

Vulnerability risk: Low

CVSSv4.0: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:A/U:Clear]

CVE-ID: CVE-2022-30333

CWE-ID: CWE-22

Exploitation vector: Network

Exploits in database: 7

• August 9, 2022
  • Zimbra UnRAR Path Traversal [Packet Storm]
• August 4, 2022
  • UnRAR Path Traversal in Zimbra (CVE-2022-30333) [Metasploit]
  • UnRAR Path Traversal (CVE-2022-30333) [Metasploit]
• July 26, 2022
  • Zimbra-CVE-2022-30333 (Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.) [Github]
• July 24, 2022
  • CVE-2022-30333 () [Github]
• July 18, 2022
  • unrar-cve-2022-30333-poc () [Github]
• July 5, 2022
  • CVE-2022-30333-PoC () [Github]

Vulnerable software:
UnRar
Client/Desktop applications / Software for archiving

Vendor: RARLAB