Directory Traversal Vulnerability in UnRAR by Eugene Roshal

CVE-2017-12938

Summary

UnRAR versions prior to 5.5.7 are susceptible to a directory traversal vulnerability that enables remote attackers to access restricted files. This can be achieved by leveraging symbolic links pointing to the current (.) or parent (..) directory, allowing unauthorized file access. This flaw raises significant security concerns as it may expose sensitive information and lead to further exploitation.

References