vulnerability

Zimbra Collaboration: CVE-2022-30333: Directory traversal leads to file writing

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
May 9, 2022
Added
Aug 18, 2022
Modified
Jun 6, 2023

Description

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, Zimbra collaboration is specifically vulnerable to this

Solution

zimbra-collaboration-upgrade-latest
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.