Vulnerabilnost v unrarju, ki omogoča prepisovanje datotek pri razpakiranju arhiva
A vulnerability (CVE-2022-30333) has been discovered in the unrar utility, allowing specially crafted archives to overwrite files outside the current directory during extraction, as permitted by user rights. The issue has been fixed in RAR 6.12 and unrar 6.1.7 releases. The vulnerability affects versions for Linux, FreeBSD, and macOS but does not impact builds for Android and Windows. The problem is caused by a lack of proper checking for the sequence ‘/..’ […]
