CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- patrickjuchli basic-ftpBasic FTP has Path Traversal Vulnerability in its downloadToDir() method9.1 Critical
- octopus serverIn affected version of Octopus Deploy it was possible to remove files and/or contents of files on...5.9 Medium
- motex lanscope endpoint manager, motex inc. lanscope endpoint manager (on-premises) sub-manager server +1 morePath traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server...9.3 Critical
- asustor adm, data master +1 moreA path traversal vulnerability was found in the FTP Backup on the ADM.9.2 Critical
- jugmac00 flask-reuploadedFlask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection9.8 Critical
- rollup, red hat openshift pipelines, openshift service mesh 3 +26 more +28 moreRollup 4 has Arbitrary File Write via Path Traversal8.8 High
- open-emr openemrOpenEMR Arbitrary File Read Vulnerability10.0 Critical
- rikyoz bit7zbit7z has a path traversal vulnerability5.5 Medium
- daguDagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory7.1 High
- gofiber fiberFiber has an Arbitrary File Read in Static Middleware on Windows7.7 High
- linksys mr9600, mx4200, mr9600 firmware +1 more +3 morePath Traversal vulnerability in Linksys MR9600, Linksys MX42006.6 Medium
- mindsdbMindsDB has Path Traversal in /api/files Leading to Remote Code Execution8.8 High
- muyucmsMuYuCMS Template Management Template.php delete_dir_file path traversal5.1 Medium
- hummerriskHummerRisk Archive Extraction CommandUtils.java extractZip path traversal5.3 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy8.6 High
- datalinkdc dinkyDataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal5.3 Medium
- traccarTraccar vulnerable to Path Traversal and External Control of File Name or Path6.5 Medium
- dromara ujcmsDromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal5.3 Medium
- feng ha ha ssm-erp, production ssm +1 morefeng_ha_ha/megagao ssm-erp/production_ssm PictureController.java pictureDelete path traversal5.3 Medium
- feng ha ha ssm-erp, production ssm +1 morefeng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java deleteFile path traversal5.3 Medium
- getsimple-ce getsimple cms, getsimplecms-ce +1 moreGetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability8.8 High
- mlflow, red hat openshift ai (rhoai) +1 moreMLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability8.1 High
- alex4ssb adb explorer, adb-explorer +1 moreADB Explorer is Vulnerable to Arbitrary Directory Deletion via Command-Line Argument7.1 High
- vmware spring data geode, red hat fuse 7, vmware spring data gemfire +2 moreZip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)8.2 High
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability6.5 Medium
- vanquish upload files anywhereWordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Download vulnerability7.5 High
- vanquish upload files anywhereWordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Deletion vulnerability8.6 High
- vanquish user extra fieldsWordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability7.7 High
- vanquish user extra fieldsWordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability8.6 High
- murtaza bhurgri woo file dropzoneWordPress Woo File Dropzone plugin <= 1.1.7 - Arbitrary File Deletion vulnerability7.7 High
- 100plugins open user mapWordPress Open User Map plugin <= 1.4.16 - Arbitrary File Download vulnerability6.5 Medium
- zenitel alphacom xe audio serverAuthenticated Arbitrary File Read via filepath parameter6.5 Medium
- calibre-ebook calibrecalibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution9.3 Critical
- calibre-ebook calibrecalibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution9.3 Critical
- devolutions server, music-assistant music assistant server +1 moreMusic Assistant Server Path Traversal in Playlist Update API Allows Remote Code Execution8.8 High
- opentext xm faxPath Traversal vulnerability have been discovered in OpenText™ XM Fax.7.1 High
- openclawOpenClaw < 2026.2.14 - Path Traversal in apply_patch via Crafted Paths8.7 High
- kaleidos penpotPenpot has Arbitrary File Read via create-font-variant RPC endpoint7.5 High
- dgtlmoon changedetection.io, webtechnologies changedetection +1 morechangedetection.io vulnerable to unauthenticated static path traversal5.3 Medium
- dynamicweb 9Unauthenticated RCE in Dynamicweb 9 and Dynamicweb 810.0 Critical
- cocoteanet cyreneadminCoCoTeaNet CyreneAdmin Image getAvatar path traversal5.3 Medium
- tsinghua unigroup electronic archives systemTsinghua Unigroup Electronic Archives System downLoad.html path traversal5.3 Medium
- genivia gsoapGenivia gSOAP 2.8 - 'gSOAP' Path Traversal8.7 High
- genivia inc. crystal live http serverGenivia Crystal Live HTTP Server 6.01 - 'Crystal Live HTTP Server' Path Traversal8.7 High
- tsinghua unigroup electronic archives systemTsinghua Unigroup Electronic Archives System downLoad download path traversal5.3 Medium
- invoiceplaneInvoicePlane has Unauthenticated Path Traversal in Guest Controller9.3 Critical
- openclawOpenClaw < 2026.2.14 - Local File Inclusion via mediaPath Parameter in BlueBubbles Media Handling8.2 High
- openclawOpenClaw < 2026.2.13 - Path Traversal in Trace and Download Output Paths8.7 High
- openclawOpenClaw has a Path Traversal in Browser Download Functionality6.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreRisky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise3.5 Low
- Show moreLoading…