---
id: 7343
title: "[CVE-2022-30333] Các lỗ hổng mới liên tục xuất hiện trên Zimbra - Phần II"
cve: CVE-2022-30333
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cac-lo-hong-moi-lien-tuc-xuat-hien-tren-zimbra-phan-ii/"
published_at: "2022-09-07T11:30:10Z"
tags: ["rce", "path-traversal", "vulnerability-analysis", "zimbra", "cve-2022-30333", "unrar"]
phying_url: "https://phying.com/item/7343"
lang: en
---

# [CVE-2022-30333] Các lỗ hổng mới liên tục xuất hiện trên Zimbra - Phần II

## Summary

Part two on Zimbra dissects CVE-2022-30333, an UnRAR path traversal: Windows-style symlinks inside RAR archives escape extraction, letting attackers drop a JSP webshell via Amavis and achieve RCE.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2022-30333
- **Published:** 2022-09-07T11:30:10Z
- **Original:** https://blog.viettelcybersecurity.com/cac-lo-hong-moi-lien-tuc-xuat-hien-tren-zimbra-phan-ii/
- **Phying News:** https://phying.com/item/7343