Executive brief
Junrar vulnerable to Infinite Loop
Affected products
- Maven com.github.junrar:junrar
Junglewise Threat Intelligence
CVE-2018-12418: Junrar vulnerable to Infinite Loop
CVE-2018-12418 · Severity: low · CVSS 3 · Published 2018-10-17
Technologies: com.github.junrar:junrar (Maven). Vendors: Maven.
Related threats
- Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFold
- Junrar path traversal in LocalFolderExtractor
- Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
- Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive