Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-gjr1-fc83-dfe6
SummaryAn arbitrary file overwrite vulnerability has been discovered in RAR and UnRAR, potentially resulting in arbitrary code execution.
Aliases
0
alias CVE-2022-30333
Fixed_packages
0
url pkg:deb/debian/rar@2:6.20~b1-0.1?distro=trixie
purl pkg:deb/debian/rar@2:6.20~b1-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.20~b1-0.1%3Fdistro=trixie
1
url pkg:deb/debian/rar@2:6.20-0.1~deb11u1?distro=trixie
purl pkg:deb/debian/rar@2:6.20-0.1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.20-0.1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/rar@2:6.23-1~deb11u1?distro=trixie
purl pkg:deb/debian/rar@2:6.23-1~deb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gkjf-x8s7-57dn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.23-1~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/rar@2:6.23-1~deb11u1
purl pkg:deb/debian/rar@2:6.23-1~deb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gkjf-x8s7-57dn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.23-1~deb11u1
4
url pkg:deb/debian/rar@2:7.01-1~deb12u1?distro=trixie
purl pkg:deb/debian/rar@2:7.01-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.01-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/rar@2:7.11-1?distro=trixie
purl pkg:deb/debian/rar@2:7.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.11-1%3Fdistro=trixie
6
url pkg:deb/debian/rar@2:7.20-1?distro=trixie
purl pkg:deb/debian/rar@2:7.20-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.20-1%3Fdistro=trixie
7
url pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.0.3-1%252Bdeb11u1%3Fdistro=trixie
8
url pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gkjf-x8s7-57dn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.0.3-1%252Bdeb11u3%3Fdistro=trixie
9
url pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3
purl pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gkjf-x8s7-57dn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.0.3-1%252Bdeb11u3
10
url pkg:deb/debian/unrar-nonfree@1:6.1.7-1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:6.1.7-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.1.7-1%3Fdistro=trixie
11
url pkg:deb/debian/unrar-nonfree@1:6.2.6-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:6.2.6-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gkjf-x8s7-57dn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.2.6-1%252Bdeb12u1%3Fdistro=trixie
12
url pkg:deb/debian/unrar-nonfree@1:7.1.8-1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:7.1.8-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.1.8-1%3Fdistro=trixie
13
url pkg:deb/debian/unrar-nonfree@1:7.2.5-1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:7.2.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.2.5-1%3Fdistro=trixie
14
url pkg:deb/debian/unrar-nonfree@1:7.2.5-2?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:7.2.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.2.5-2%3Fdistro=trixie
15
url pkg:ebuild/app-arch/rar@6.23
purl pkg:ebuild/app-arch/rar@6.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/rar@6.23
16
url pkg:ebuild/app-arch/unrar@6.2.10
purl pkg:ebuild/app-arch/unrar@6.2.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/unrar@6.2.10
17
url pkg:ebuild/app-arch/unrar@6.23
purl pkg:ebuild/app-arch/unrar@6.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/unrar@6.23
Affected_packages
0
url pkg:deb/debian/rar@2.02-2
purl pkg:deb/debian/rar@2.02-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b8js-x7uu-wka5
1
vulnerability VCID-cnah-rewa-vfe5
2
vulnerability VCID-gjr1-fc83-dfe6
3
vulnerability VCID-pu5p-qncp-nyb9
4
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.02-2
1
url pkg:deb/debian/rar@2.60-1
purl pkg:deb/debian/rar@2.60-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b8js-x7uu-wka5
1
vulnerability VCID-cnah-rewa-vfe5
2
vulnerability VCID-gjr1-fc83-dfe6
3
vulnerability VCID-pu5p-qncp-nyb9
4
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.60-1
2
url pkg:deb/debian/rar@2.80-2
purl pkg:deb/debian/rar@2.80-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b8js-x7uu-wka5
1
vulnerability VCID-cnah-rewa-vfe5
2
vulnerability VCID-gjr1-fc83-dfe6
3
vulnerability VCID-pu5p-qncp-nyb9
4
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.80-2
3
url pkg:deb/debian/rar@3.30-2
purl pkg:deb/debian/rar@3.30-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b8js-x7uu-wka5
1
vulnerability VCID-cnah-rewa-vfe5
2
vulnerability VCID-gjr1-fc83-dfe6
3
vulnerability VCID-pu5p-qncp-nyb9
4
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@3.30-2
4
url pkg:deb/debian/rar@1:3.7b1-2
purl pkg:deb/debian/rar@1:3.7b1-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cnah-rewa-vfe5
1
vulnerability VCID-gjr1-fc83-dfe6
2
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@1:3.7b1-2
5
url pkg:deb/debian/rar@1:3.8b3-1
purl pkg:deb/debian/rar@1:3.8b3-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cnah-rewa-vfe5
1
vulnerability VCID-gjr1-fc83-dfe6
2
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@1:3.8b3-1
6
url pkg:deb/debian/rar@2:3.9.3-1
purl pkg:deb/debian/rar@2:3.9.3-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cnah-rewa-vfe5
1
vulnerability VCID-gjr1-fc83-dfe6
2
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:3.9.3-1
7
url pkg:deb/debian/rar@2:4.0.b3-1
purl pkg:deb/debian/rar@2:4.0.b3-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cnah-rewa-vfe5
1
vulnerability VCID-gjr1-fc83-dfe6
2
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.0.b3-1
8
url pkg:deb/debian/rar@2:4.2.0-1
purl pkg:deb/debian/rar@2:4.2.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cnah-rewa-vfe5
1
vulnerability VCID-gjr1-fc83-dfe6
2
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.2.0-1
9
url pkg:deb/debian/rar@2:4.2.0%2Bdfsg.1-0.1
purl pkg:deb/debian/rar@2:4.2.0%2Bdfsg.1-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cnah-rewa-vfe5
1
vulnerability VCID-gjr1-fc83-dfe6
2
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.2.0%252Bdfsg.1-0.1
10
url pkg:deb/debian/rar@2:5.4.0%2Bdfsg.1-0.1
purl pkg:deb/debian/rar@2:5.4.0%2Bdfsg.1-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gjr1-fc83-dfe6
1
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:5.4.0%252Bdfsg.1-0.1
11
url pkg:deb/debian/rar@2:5.5.0-1
purl pkg:deb/debian/rar@2:5.5.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gjr1-fc83-dfe6
1
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:5.5.0-1
12
url pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2
purl pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-pu5p-qncp-nyb9
8
vulnerability VCID-puzg-hype-rqge
9
vulnerability VCID-tsuy-3xvt-bqgv
10
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2
13
url pkg:deb/debian/unrar-nonfree@1:3.5.4-1
purl pkg:deb/debian/unrar-nonfree@1:3.5.4-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-pu5p-qncp-nyb9
8
vulnerability VCID-puzg-hype-rqge
9
vulnerability VCID-tsuy-3xvt-bqgv
10
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.4-1
14
url pkg:deb/debian/unrar-nonfree@1:3.5.4-1.1
purl pkg:deb/debian/unrar-nonfree@1:3.5.4-1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-pu5p-qncp-nyb9
8
vulnerability VCID-puzg-hype-rqge
9
vulnerability VCID-tsuy-3xvt-bqgv
10
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.4-1.1
15
url pkg:deb/debian/unrar-nonfree@1:3.8.2-1
purl pkg:deb/debian/unrar-nonfree@1:3.8.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-puzg-hype-rqge
8
vulnerability VCID-tsuy-3xvt-bqgv
9
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.8.2-1
16
url pkg:deb/debian/unrar-nonfree@1:3.9.10-1
purl pkg:deb/debian/unrar-nonfree@1:3.9.10-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-puzg-hype-rqge
8
vulnerability VCID-tsuy-3xvt-bqgv
9
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.9.10-1
17
url pkg:deb/debian/unrar-nonfree@1:4.1.4-1%2Bdeb7u1
purl pkg:deb/debian/unrar-nonfree@1:4.1.4-1%2Bdeb7u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-puzg-hype-rqge
8
vulnerability VCID-tsuy-3xvt-bqgv
9
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:4.1.4-1%252Bdeb7u1
18
url pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1
purl pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-puzg-hype-rqge
8
vulnerability VCID-tsuy-3xvt-bqgv
9
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1
19
url pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1%2Bdeb8u1
purl pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-puzg-hype-rqge
8
vulnerability VCID-tsuy-3xvt-bqgv
9
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1%252Bdeb8u1
20
url pkg:deb/debian/unrar-nonfree@1:5.3.2-1%2Bdeb9u1
purl pkg:deb/debian/unrar-nonfree@1:5.3.2-1%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv1j-kw6x-2be3
1
vulnerability VCID-f34r-6g94-kfbb
2
vulnerability VCID-fgxb-t1tg-kyay
3
vulnerability VCID-gjr1-fc83-dfe6
4
vulnerability VCID-hfdc-gb8e-5ydx
5
vulnerability VCID-k4zz-huer-13hq
6
vulnerability VCID-k7bd-dhht-xqa2
7
vulnerability VCID-puzg-hype-rqge
8
vulnerability VCID-tsuy-3xvt-bqgv
9
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.3.2-1%252Bdeb9u1
21
url pkg:deb/debian/unrar-nonfree@1:5.6.6-1%2Bdeb10u1
purl pkg:deb/debian/unrar-nonfree@1:5.6.6-1%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gjr1-fc83-dfe6
1
vulnerability VCID-k4zz-huer-13hq
2
vulnerability VCID-xz6c-axe8-8qbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.6.6-1%252Bdeb10u1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-30333
reference_id
reference_type
scores
0
value 0.92811
scoring_system epss
scoring_elements 0.99764
published_at 2026-04-21T12:55:00Z
1
value 0.92811
scoring_system epss
scoring_elements 0.99762
published_at 2026-04-13T12:55:00Z
2
value 0.92811
scoring_system epss
scoring_elements 0.99763
published_at 2026-04-18T12:55:00Z
3
value 0.92844
scoring_system epss
scoring_elements 0.99765
published_at 2026-04-04T12:55:00Z
4
value 0.92844
scoring_system epss
scoring_elements 0.99764
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-30333
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30333
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010837
reference_id 1010837
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010837
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012228
reference_id 1012228
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012228
5
reference_url https://security.gentoo.org/glsa/202309-04
reference_id GLSA-202309-04
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/
url https://security.gentoo.org/glsa/202309-04
6
reference_url https://lists.debian.org/debian-lts-announce/2023/08/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/
url https://lists.debian.org/debian-lts-announce/2023/08/msg00022.html
7
reference_url https://www.rarlab.com/rar_add.htm
reference_id rar_add.htm
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/
url https://www.rarlab.com/rar_add.htm
8
reference_url https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz
reference_id rarlinux-x32-612.tar.gz
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/
url https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz
9
reference_url https://usn.ubuntu.com/6569-1/
reference_id USN-6569-1
reference_type
scores
url https://usn.ubuntu.com/6569-1/
10
reference_url https://usn.ubuntu.com/7349-1/
reference_id USN-7349-1
reference_type
scores
url https://usn.ubuntu.com/7349-1/
11
reference_url https://usn.ubuntu.com/7350-1/
reference_id USN-7350-1
reference_type
scores
url https://usn.ubuntu.com/7350-1/
12
reference_url https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/
reference_id zimbra-pre-auth-rce-via-unrar-0day
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/
url https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/
13
reference_url http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html
reference_id Zimbra-UnRAR-Path-Traversal.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/
url http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html
Weaknesses
Exploits
0
date_added null
description 
This module creates a RAR file that can be emailed to a Zimbra server
          to exploit CVE-2022-30333. If successful, it plants a JSP-based
          backdoor in the public web directory, then executes that backdoor.

          The core vulnerability is a path-traversal issue in unRAR that can
          extract an arbitrary file to an arbitrary location on a Linux system.

          This issue is exploitable on the following versions of Zimbra, provided
          UnRAR version 6.11 or earlier is installed:

          * Zimbra Collaboration 9.0.0 Patch 24 (and earlier)
          * Zimbra Collaboration 8.8.15 Patch 31 (and earlier)
required_action null
due_date null
notes 
Stability:
  - crash-safe
Reliability:
  - repeatable-session
SideEffects:
  - ioc-in-logs
known_ransomware_campaign_use false
source_date_published 2022-06-28
exploit_type null
platform Linux
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/linux/http/zimbra_unrar_cve_2022_30333.rb
1
date_added 2022-08-09
description RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
required_action Apply updates per vendor instructions.
due_date 2022-08-30
notes Vulnerability updated with version 6.12. Accessing link will download update information: https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz; https://nvd.nist.gov/vuln/detail/CVE-2022-30333
known_ransomware_campaign_use true
source_date_published null
exploit_type null
platform null
source_date_updated null
data_source KEV
source_url null
Severity_range_score6.6 - 7.5
Exploitability2.0
Weighted_severity6.8
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-gjr1-fc83-dfe6