The newly discovered CVE-2022-41352 is almost identical to CVE-2022-30333, the unrar bug from August.
The difference is only the usage of a different file format, e.g., .cpio and .tar as opposed to .rar.
The vulnerable component is Zimbra’s antivirus engine’s (Amavis).
To exploit the vulnerability, an attacker would email a respective file to an affected server.
When Amavis inspects it for malware, it uses cpio to extract the file.
As cpio cannot securely treat untrusted files, an attacker can write to any path on the filesystem that the zimbra user can access.
Zimbra provided mitigations in their article. Rapid7 provides a good analysis.