SOURCE FACT
RARLAB · WinRAR
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
Required action
Apply updates per vendor instructions.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2018-20250
View source evidence →CISA known exploited vulnerability
CVE-2018-20250
WinRAR Absolute Path Traversal Vulnerability
CHECK YOUR OUTSIDE-IN INVENTORY