| Titel | Rarlab RAR APP(com.rarlab.rar) <=V7.11.build127 Path Traversal |
|---|
| Beschreibung | The RAR app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite/read arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
|
|---|
| Quelle | ⚠️ https://github.com/Secsys-FDU/AF_CVEs/blob/main/com.rarlab.rar/RAR%20APP%20Arbitrary%20File%20Write%20and%20Read%20Vulnerability.md |
|---|
| Benutzer | Lu1u (UID 92433) |
|---|
| Einreichung | 18.11.2025 13:51 (vor 8 Monaten) |
|---|
| Moderieren | 05.12.2025 15:57 (17 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 334491 [Rarlab RAR App bis 7.11 Build 127 auf Android com.rarlab.rar Directory Traversal] |
|---|
| Punkte | 18 |
|---|