Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2022-30333

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.

CVSS 7.5 · HighBuzz score 71.4KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 71.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 26.4 · diversity 20.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
26.4
13 evidence mentions in the snapshot
Diversity score
20.0
10 sources across 5 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
13 source links · newest first
  • High, medium severity vulnerabilities impacting Zimbra Collaboration SuiteCSO Online

    Threat actors are actively exploiting multiple Common Vulnerabilities and Exposures (CVEs) against enterprise cloud-hosted collaboration software and email platform Zimbra Collaboration Suite (ZCS), according to an advisory update jointly issued by the US Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC). The latest update lists CVEs currently being […]

    newswww.csoonline.comOct 20, 2022, 11:23 AM
  • Critical Zimbra RCE Vulnerability Exploited in AttacksSecurityWeek

    The Zimbra Collaboration Suite is impacted by a critical remote code execution vulnerability that remains unpatched, despite being exploited in attacks.

    newswww.securityweek.comOct 10, 2022, 1:12 PM
  • Unpatched Zimbra RCE bug exploited by attackers (CVE-2022-41352)Help Net Security

    A still unpatched vulnerability (CVE-2022-41352) in Zimbra Collaboration is being exploited by attackers to achieve remote code execution on vulnerable servers. About the vulnerability Zimbra Collaboration (formerly Zimbra Collaboration Suite) is cloud-hosted collaboration software suite that also includes an email server component and a web client component. CVE-2022-41352 exists due to Zimbra’s Amavis antivirus engine using the cpio method to scan inbound emails. “CVE-2022-41352 is effectively identical to CVE-2022-30333 but leverages a different file format … More →

    newswww.helpnetsecurity.comOct 10, 2022, 12:09 PM
  • UnRAR Vulnerability Exploited in the Wild, Likely Against Zimbra ServersSecurityWeek

    The US Cybersecurity and Infrastructure Security Agency (CISA) revealed on Tuesday that a recently patched vulnerability affecting the UnRAR archive extraction tool is being exploited in the wild.

    newswww.securityweek.comAug 10, 2022, 10:49 AM
  • CISA adds UnRAR and Windows flaws to Known Exploited Vulnerabilities CatalogSecurity Affairs

    US Critical Infrastructure Security Agency (CISA) adds vulnerabilities in the UnRAR utility to its Known Exploited Vulnerabilities Catalog. The Cybersecurity & Infrastructure Security Agency (CISA) has added a recently disclosed security flaw, tracked as CVE-2022-30333 (CVSS score: 7.5), in the UnRAR utility to its Known Exploited Vulnerabilities Catalog. The CVE-2022-30333 flaw is a path traversal […]

    newssecurityaffairs.comAug 10, 2022, 10:39 AM
  • Path Traversal flaw in UnRAR utility can allow hacking Zimbra Mail serversSecurity Affairs

    Researchers discovered a new flaw in RARlab’s UnRAR utility, tracked CVE-2022-30333, that can allow to remotely hack Zimbra Webmail servers. SonarSource researchers have discovered a new vulnerability in RARlab’s UnRAR utility, tracked as CVE-2022-30333, that can be exploited by remote attackers to execute arbitrary code on a system that relies on the binary, like Zimbra […]

    newssecurityaffairs.comJun 29, 2022, 2:48 PM
  • https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-30333www.cisa.gov

    No excerpt available.

    Mitigationwww.cisa.govMay 9, 2022, 8:15 AM
  • https://www.rarlab.com/rar_add.htmwww.rarlab.com

    No excerpt available.

    Patchwww.rarlab.comMay 9, 2022, 8:15 AM
  • https://www.rarlab.com/rar/rarlinux-x32-612.tar.gzwww.rarlab.com

    No excerpt available.

    Patchwww.rarlab.comMay 9, 2022, 8:15 AM
  • https://security.gentoo.org/glsa/202309-04security.gentoo.org

    No excerpt available.

    Vendor Advisorysecurity.gentoo.orgMay 9, 2022, 8:15 AM
  • https://lists.debian.org/debian-lts-announce/2023/08/msg00022.htmllists.debian.org

    No excerpt available.

    Vendor Advisorylists.debian.orgMay 9, 2022, 8:15 AM
  • https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/blog.sonarsource.com

    No excerpt available.

    Exploitblog.sonarsource.comMay 9, 2022, 8:15 AM
  • http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.htmlpacketstormsecurity.com

    No excerpt available.

    Exploitpacketstormsecurity.comMay 9, 2022, 8:15 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence