mediumCVSS 5.9Vulnerability
GHSA-hf5p-q87m-crj7
### Summary A path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. ### Example Given an extraction directory set to `/tmp/extract`, a crafted archive with an entry with the filename as `../extract_evil/file.txt` would be actually extracted to `/tmp/extract_evil/file.txt`. ### Details The `createDirectory()` and `createFile()` methods in`LocalFolderExtractor` validate extraction paths using a string prefix.
Properties
- ghsa_id
- GHSA-hf5p-q87m-crj7
- severity
- medium
- summary
- Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
- cvss_score
- 5.9
- cve_id
- GHSA-hf5p-q87m-crj7
- cvss_vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- is_ghsa_only
- true
- ghsa_published
- 2026-04-16T21:14:33Z
- source_url
- https://github.com/advisories/GHSA-hf5p-q87m-crj7
- ghsa_updated
- 2026-04-16T21:14:34Z
Related Entities (4)
VULNERABLE_TO (1)
←[Software]maven/com.github.junrar:junrar
AFFECTS (1)
→[Software]maven/com.github.junrar:junrar
HAS_WEAKNESS (1)
→[Weakness]Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
REPORTED_BY (1)
→[Source]GitHub Advisory Database
Explore deeper with Ninja Signal's threat intelligence graph