CVE-2023-38831

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also a folder that has the same name as the benign file, and the contents of the folder (which may include executable content) are processed during an attempt to access only the benign file. This was exploited in the wild in April through October 2023.

• CWE-345
• CWE-351

• http://packetstormsecurity.com/files/174573/WinRAR-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/Exploit, Third Party Advisory
• https://news.ycombinator.com/item?id=37236100Issue Tracking
• https://www.bleepingcomputer.com/news/security/winrar-zero-day-exploited-since-april-to-hack-trading-accounts/Exploit, Press/Media Coverage, Third Party Advisory
• https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/Exploit, Press/Media Coverage, Third Party Advisory
• http://packetstormsecurity.com/files/174573/WinRAR-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/Exploit, Third Party Advisory
• https://news.ycombinator.com/item?id=37236100Issue Tracking
• https://www.bleepingcomputer.com/news/security/winrar-zero-day-exploited-since-april-to-hack-trading-accounts/Exploit, Press/Media Coverage, Third Party Advisory
• https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/Exploit, Press/Media Coverage, Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38831US Government Resource

Published

Aug 23, 2023

Last Modified

Aug 5, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38825SQL injection vulnerability in Vanderbilt REDCap before v.13…6.5
• CVE-2023-38826A Cross Site Scripting (XSS) vulnerability exists in Follet …6.1
• CVE-2023-38827Cross Site Scripting vulnerability in Follet School Solution…6.1
• CVE-2023-38829An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remot…8.8
• CVE-2023-3883A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2023-38830An information leak in PHPJabbers Yacht Listing Script v1.0 …7.5
• CVE-2023-38836File Upload vulnerability in BoidCMS v.2.0.0 allows a remote…8.8
• CVE-2023-38838SQL injection vulnerability in Kidus Minimati v.1.0.0 allows…7.5
• CVE-2023-38839SQL injection vulnerability in Kidus Minimati v.1.0.0 allows…7.5
• CVE-2023-3884A vulnerability has been found in Campcodes Beauty Salon Man…6.1
• CVE-2023-38840Bitwarden Desktop 2023.7.0 and below allows an attacker with…5.5
• CVE-2023-38843An issue in Atlos v.1.0 allows an authenticated attacker to …8