CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- tenda ch22, ch22 firmware +1 moreTenda CH22 public path traversal6.9 Medium
- riello netman, riello-ups netman 208 +1 moreRiello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory...9.1 Critical
- logicaldoc, logicaldoc srl enterprise +1 moreLogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities7.1 High
- videoflow ltd. digital video protection dvpVideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal7.1 High
- beward n100 h.264 vga ip cameraBeward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure7.1 High
- microhard systems 3g/4g cellular ethernet and serial gateway arbitrary file attacks, microhardcorp bullet-3g firmware, bullet-lte firmware +9 more +11 moreMicrohard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System Editor8.7 High
- deciso opnsenseDeciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability4.5 Medium
- soda pdf desktop, sodapdf soda pdf desktop +1 moreSoda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability7.8 High
- pdfforge pdf architectpdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability7.8 High
- home-assistantHome Assistant Core before is vulnerable to Directory Traversal4.0 Medium
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File Write8.8 High
- mybbMyBB 1.8.32 Authenticated Remote Code Execution via Chained Vulnerabilities8.6 High
- kedacore kedaKEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential8.2 High
- sharp np-cr5450h firmware, np-cr5450hl firmware, np-cr5450w firmware +24 more +26 morePath Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access...9.1 Critical
- 1541492390c yougou-mall1541492390c yougou-mall ResourceController.java delete path traversal5.1 Medium
- edimax br-6208ac, br-6208ac firmware +1 moreEdimax BR-6208AC FTP Daemon Service handle_retr path traversal5.3 Medium
- eve-ngEVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows...7.6 High
- takes tkfilesThe Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths...7.5 High
- weblateWeblate has git config file overwrite vulnerability that leads to remote code execution9.1 Critical
- weblateWeblate has an arbitrary file read via symbolic links7.7 High
- streamaStreama Subtitle Download Path Traversal and SSRF Leading to Arbitrary File Write8.7 High
- advantech webaccess/scada, webaccess\/scada +1 moreAdvantech WebAccess/SCADA Path Traversal5.3 Medium
- advantech webaccess/scada, webaccess\/scada +1 moreAdvantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory7.2 High
- easyphp webserverEasyPHP Webserver 14.1 Path Traversal via Directory Traversal Sequences7.1 High
- amentotech tuturnWordPress Tuturn plugin < 3.6 - Arbitrary File Download vulnerability6.5 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 morePath traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.07.2 High
- smub photo gallery, sliders, proofing and themes – nextgen galleryPhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'8.8 High
- wp chill filrWordPress Filr plugin <= 1.2.10 - Arbitrary File Deletion vulnerability7.7 High
- romancode mapsvgWordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability6.5 Medium
- bludit backup plugin, bludit +1 moreBludit < 3.13.0 Authenticated Arbitrary File Download via Backup Plugin7.1 High
- lfprojects model context protocol servers, modelcontextprotocol servers +1 moremcp-server-git has missing path validation when using --repository flag6.4 Medium
- lfprojects model context protocol servers, modelcontextprotocol servers +1 moremcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations6.5 Medium
- f5 nginx ingress controllerNGINX Ingress Controller vulnerability8.7 High
- dylanjkotze zephyr project managerZephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery4.9 Medium
- ritecmsA local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary...7.5 High
- ritecmsIncorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to...7.5 High
- vitejs vite-plugin-react@vitejs/plugin-rsc has Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint on Development7.5 High
- websitebakerWebsiteBaker 2.13.3 Directory Traversal via Media Delete Endpoint7.0 High
- wavestore server, video management software server +1 moreArbitrary File Read and Delete via Path Traversal in WaveStore Server8.6 High
- wavestore server, video management software server +1 moreArbitrary File Read and Delete via Path Traversal in WaveStore Server5.1 Medium
- wavestore server, video management software server +1 moreOS Command Injection via Path Traversal in WaveStore Server8.6 High
- c4illin convertxConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Execution8.8 High
- allskyteam allskyA Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an...10.0 Critical
- freshrssFreshRSS vulnerable to authenticated RCE via path traversal inside include()7.4 High
- manager-io managerNetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCE8.7 High
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 API eshell path traversal6.9 Medium
- smartbit commv smartschool appSmartbit CommV Smartschool App be.smartschool.mobile.SplashActivity path traversal4.8 Medium
- municorn fax appMunicorn FAX App biz.faxapp.app path traversal4.8 Medium
- atlaszz ai photo team galleryit appatlaszz AI Photo Team Galleryit App gallery.photogallery.pictures.vault.album path traversal4.8 Medium
- kagilum icescrumA Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows...8.8 High
- Show moreLoading…