Unrar'de haavatavus, mis võimaldab faile kirjutada üle arhiivi lahti pakkimisel
A vulnerability (CVE-2022-30333) has been identified in the unrar utility, allowing specially crafted archives to overwrite files outside the current directory, as permitted by user rights. The issue has been resolved in RAR 6.12 and unrar 6.1.7 releases. The vulnerability manifests in versions for Linux, FreeBSD, and macOS but does not affect builds for Android and Windows. The problem is caused by inadequate validation of the "../" sequence […]
