Executive brief
Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive
Affected products
- Maven com.github.junrar:junrar
Junglewise Threat Intelligence
CVE-2022-23596: Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive
CVE-2022-23596 · Severity: low · CVSS 3.1 · Published 2022-02-01
Technologies: com.github.junrar:junrar (Maven). Vendors: Maven.
Related threats
- Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFold
- Junrar path traversal in LocalFolderExtractor
- Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
- Junrar vulnerable to Infinite Loop