CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- albrecht jung gmbh & co. kg jung smart panel 5.1 knxJUNG Smart Panel 5.1 KNX Unauthenticated Path Traversal6.9 Medium
- tp-link systems inc. tapo c260 v1, tp link systems inc. tapo c211 v2, tapo c520ws v2.6 +2 more +4 morePath Traversal on TP-Link Tapo D235, C211, C520WS and C260 via Local https6.9 Medium
- axis camera station proAn AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view...4.6 Medium
- frangoteam fuxaFUXA has a Path Traversal Sanitization Bypass8.6 High
- wago 0852-1322, 0852-1328 +1 moreAuthentication Bypass via URI Traversal7.5 High
- rachelos werss we-mp-rssrachelos WeRSS we-mp-rss tools.py download_export_file path traversal5.3 Medium
- jeecg bootJeecgBoot Retrieval-Augmented Generation edit path traversal5.3 Medium
- unknown post slidesPost Slides <= 1.0.1 - Contributor+ Local File Inclusion5.5 Medium
- calibre-ebook calibrecalibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution8.6 High
- calibre-ebook calibrecalibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution8.2 High
- actix actix-filesactix-files before 0.6.10 Information Disclosure via Files6.3 Medium
- pydantic ai, pydantic-ai, red hat enterprise linux ai (rhel ai) 3 +2 morePydantic AI affected by Stored XSS via Path Traversal in Web UI CDN URL7.1 High
- microsoft semantic-kernelSemantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK10.0 Critical
- gogsGogs vulnerable to arbitrary file deletion via path traversal in wiki page update7.2 High
- gogsGogs has arbitrary file read/write via path traversal in Git hook editing6.5 Medium
- bishopfox sliverWebsite Path Traversal / Arbitrary File Read (Authenticated) in Sliver6.5 Medium
github.com/opencloud-eu/opencloudGoOpenCloud Affected by Public Link Exploit8.2 High- zauberzeug niceguiNiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write7.5 High
- opencloud-eu reva, heinlein opencloud reva +1 moreREVA Public Link Exploit8.2 High
- primion digitek digitek adt1100, digitek dt950 +1 morePath Traversal in Digitek from Grupo Azkoyen8.7 High
- shortpixel image optimizer – optimize images, convert webp & avifShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter4.9 Medium
- frangoteam fuxaFUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API9.5 Critical
- zipperapp my teditorA path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via...5.5 Medium
- tum navigatumNavigaTUM has a Path Traversal Vulnerability in the propose_edits functionality8.8 High
- openclawOpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction6.5 Medium
- alistgo alistAlist vulnerable to Path Traversal in multiple file operation handlers8.8 High
- n8nn8n Arbitrary File Write on Remote Systems via SSH Node7.1 High
- qriouslad code explorerCode Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter4.9 Medium
- samsung members, samsung mobile chinese samsung members +1 morePath traversal in Samsung Members prior to Chinese version 15.5.05.4 allows local attackers to...5.1 Medium
- samsung android, samsung mobile devices +1 morePath traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local...6.8 Medium
- chainguard melangemelange has a path traversal in license-path which allows reading files outside workspace5.5 Medium
- No product listedAn arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95...8.1 High
- ntoolslab office readerA path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via...5.0 Medium
- coto.world cotoAn arbitrary file overwrite vulnerability in the file import process of Tarot, Astro & Healing...6.5 Medium
- chainguard apkoapko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside base7.5 High
- chainguard melangemelange QEMU runner could write files outside workspace directory8.2 High
- adlered bolo-solobolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal5.3 Medium
- arox school erp proSchool ERP Pro 1.0 - Arbitrary File Read8.7 High
- rubikon teknoloji easy transferEasy Transfer 1.7 for iOS - Directory Traversal6.9 Medium
- twinkle toes software booked schedulerBooked Scheduler 2.7.7 - Authenticated Directory Traversal6.9 Medium
- adlered bolo-solobolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversal5.3 Medium
- lexmark cstat, cxtat, mslbd, mxlbd, cslbl, cxlbl, cslbn, cxlbn, cstmh, cxtmh, cstpp, cxtpp, mslsg, mxlsg, mxtct, msngm, mstgm, mxngm, mxtgm, csngv, cstgv, cxtgv, msngw, mstgw, mxtgw, cstls, cxtls, mxtls, cstmm, cxtmm, cstpc, cxtpc, mxtpm, msnsn, mstsn, mxtsn, csnzj, cstzj, cxnzj, cxtzj +1 moreRelative path traversal vulnerability in Embedded Solutions Framework8.8 High
- adlered bolo-solobolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal5.3 Medium
- anthropic claude code, anthropics claude-code +1 moreCluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes7.7 High
- unstructuredUnstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write9.8 Critical
- wikimedia foundation thanksUserInfoCard: Do permission checking when getting counts of global and local edits, new articles and thanks0.0 None
- mediawiki checkuserSpecial:GlobalContributions shows edits on wikis the viewer doesn't have access to1.3 Low
- wikimedia foundation checkuserUserInfoCard: Check that performing user has permission to view log entries for number of past blocks1.1 Low
- wikimedia foundation checkuserUserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights0.3 Low
- articentgroup zip rar extractor toolArticentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The...4.3 Medium
- Show moreLoading…