| 标题 | Rarlab RAR APP(com.rarlab.rar) <=V7.11.build127 Path Traversal |
|---|
| 描述 | The RAR app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite/read arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
|
|---|
| 来源 | ⚠️ https://github.com/Secsys-FDU/AF_CVEs/blob/main/com.rarlab.rar/RAR%20APP%20Arbitrary%20File%20Write%20and%20Read%20Vulnerability.md |
|---|
| 用户 | Lu1u (UID 92433) |
|---|
| 提交 | 2025-11-18 13時51分 (8 月前) |
|---|
| 管理 | 2025-12-05 15時57分 (17 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 334491 [Rarlab RAR App 直到 7.11 Build 127 于 Android com.rarlab.rar 目录遍历] |
|---|
| 积分 | 18 |
|---|