CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- stylemix motors – car dealership & classified listings plugin Motors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User Meta 8.1 High
- tomdever wpforo forum wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal via 'theme' Parameter 6.5 Medium
- vanquish83 vanquish upload files for woocommerce Vanquish Upload Files for WooCommerce <= 2.7.13 - Unauthenticated Arbitrary File Read via 'vanupfi_file_name' Parameter 5.9 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.9 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.8 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.1 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.8 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.7 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.9 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.9 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.5 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.7 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.5 High
- ibm api connect IBM API Connect Path Traversal 4.3 Medium
- realmag777 active woot products tables for woocommerce. 100% free Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Unauthenticated File Deletion via 'wp_columns_actions' and 'table_id' Parameters 6.5 Medium
- chartbrew Chartbrew: AI orchestrator run_query SQL blocklist bypass enables arbitrary file read on connected PostgreSQL (quoted-identifier + pg_stat_file/pg_ls_* sibling gap) 4.6 Medium
- esm-dev esm.sh esm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversal 7.5 High
- dbeaver cloudbeaver CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access 6.5 Medium
- dbeaver cloudbeaver CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandbox 5.3 Medium
- kopia Kopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Names 6.9 Medium
- ddev DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885 6.5 Medium
- doomsider shadow Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization 6.3 Medium
- monogramm erpnext ocr ERPNext OCR 1.1.1 Path Traversal and SSRF via read_document 7.1 High
- yuzutech kroki Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives 7.5 High
- sensiolabs symfony Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File 8.2 High
- usermin Usermin through 2.570 Path Traversal File Write via detachall.cgi 8.6 High
- charmbracelet wish Charmbracelet Wish 2.0.5 Path Traversal via git Middleware 8.6 High
- tubitak bilgem software technologies research institute pardus-boot-repair Path Traversal Leading to Arbitrary Mount in TÜBİTAK BİLGEM's pardus-boot-repair 4.3 Medium
- tubitak bilgem software technologies research institute pardus-boot-repair Path Traversal in TÜBİTAK BİLGEM's pardus-boot-repair 6.6 Medium
- apache software foundation james Apache James: ManageSieve file implementation cross-user path traversal No score
- elextensions elex wordpress helpdesk & customer ticketing system ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter 9.1 Critical
- dagu-org dagu Dagu MCP DAG specification read bypasses path containment and workspace isolation 6.5 Medium
- m66b fairemail FairEmail: Path traversal in shared attachment handling can write files outside the intended shared directory 6.3 Medium
- vitali87 code-graph-rag Code Graph RAG structural tools follow out-of-root symlinks 7.1 High
- vitali87 code-graph-rag Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read 7.5 High
- suitecrm SuiteCRM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SuiteCRM 7.2 High
- balbooa.com gridbox extension for joomla Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0 8.3 High
- aws gluonts GluonTS arbitrary file write during archive extraction 8.4 High
- apache software foundation ofbiz Apache OFBiz: Authenticated path traversal and missing authorization check in replaceImageToExistImage No score
- apache software foundation ofbiz Apache OFBiz: Authenticated path traversal and missing authorization check in imageCrop and imageRotate services No score
- kobikom telecommunications and informatics services inc. kobikom Path Traversal in Kobikom Telecommunications' Kobikom 7.5 High
- apache software foundation juneau Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory 10.0 Critical
- stylemix motors – car dealership & classified listings plugin Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter 8.1 High
- deepgraphlearning knowledgegraphembedding DeepGraphLearning KnowledgeGraphEmbedding Checkpoint Loading run.py override_config path traversal 5.3 Medium
- kyverno Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument 9.4 Critical
- edge0-ai audio8 tts Edge0-AI Audio8_TTS Model Path Resolution runtime.py ArkTtsRuntime.__init__ path traversal 5.3 Medium
- Show olderLoading…