CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedThingsGateway download path traversal5.3 Medium
- siteserver sscmsSSCMS download PathUtils.RemoveParentPath path traversal5.1 Medium
- samsung smart switchPath traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite...7.1 High
- samsung galaxy storePath traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file...5.9 Medium
- samsung galaxy storeImproper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create...7.0 High
- No product listedDoom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation...7.5 High
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM has a Zip Slip Path Traversal and Code Execution via Community Hub Plugin Import4.2 Medium
- dronecode px4 drone autopilot, px4 px4-autopilot +1 morePX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete)5.4 Medium
- icewarpIceWarp collaboration Directory Traversal Information Disclosure Vulnerability7.5 High
- unraidUnraid Authentication Request Path Traversal Authentication Bypass Vulnerability7.3 High
- unraidUnraid Update Request Path Traversal Remote Code Execution Vulnerability8.8 High
- calibre-ebook calibrecalibre has a Path Traversal Leading to Arbitrary File Write5.0 Medium
- drakkan sftpgoSFTPGo improperly sanitizes placeholders in group home directories/key prefixes5.3 Medium
- drakkan sftpgoSFTPGo has a Path Traversal and Permission Bypass via Path Normalization Discrepancy5.3 Medium
- google claspArbitrary File Write via Path Traversal in Google clasp leading to RCE8.7 High
- daguDagu has a Path Traversal via `dagRunId` in Inline DAG Execution9.1 Critical
- apache livyApache Livy: Unauthorized directory access6.3 Medium
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSFTP root escape via component-agnostic prefix check in ssh_sftpd5.3 Medium
- voltronic power snmp web pro, gvectors wpdiscuz +1 moreVoltronic Power SNMP Web Pro 1.1 Path Traversal via upload.cgi8.7 High
- psf black, red hat openshift lightspeed, ansible automation platform 2 +6 more +8 moreBlack: Arbitrary file writes from unsanitized user input in cache file name8.7 High
- dataeaseDataease: Redshift JDBC RCE Bypass9.3 Critical
- magic-wormhole project magic wormhole, magic-wormhole +1 moreMagic Wormhole: "wormhole receive" allows arbitrary local file overwrite8.2 High
- tinacms, ssw tinacms\/cli +1 morePath Traversal in Media Upload Handle in Tina7.4 High
- @tinacms cli, ssw tinacms\/cli +1 morePath Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS8.4 High
- @tinacms cli, ssw tinacms\/cli +1 moreCross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS9.7 Critical
- aisarlabs zeptoclawZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink8.8 High
- @tinacms graphql, ssw tinacms\/graphql +1 morePath Traversal in @tinacms/graphql6.3 Medium
- projectsendprojectsend Delete import-orphans.php realpath path traversal5.1 Medium
- openclawOpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink7.2 High
- openbmb xagentOpenBMB XAgent workspace.py workspace path traversal6.9 Medium
- armbotARMBot Unrestricted File Upload via upload.php8.7 High
- filethingie, leefish file thingie +1 moreFileThingie 2.5.7 Arbitrary File Upload via ft2.php9.3 Critical
- openprojectOpenProject BIM BCF XML Import: <Snapshot> Path Traversal Leads to Arbitrary Local File Read (AFR)6.5 Medium
- wanderingastronomer vociferousVociferous Unauthenticated Remote Path Traversal (RCE via CSRF)10.0 Critical
- coppermine photo gallery photo galleryPath Traversal in Coppermine Photo Gallery8.7 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.8 Medium
- gleam-wisp wispPath Traversal in wisp.serve_static allows arbitrary file read8.7 High
- olivetinOliveTin's unsafe parsing of UniqueTrackingId can be used to write files8.5 High
- mcp-atlassian mcp atlassian, sooperset mcp-atlassian +1 moreMCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment9.1 Critical
- @appium support, appium appium\/support +1 moreZip Slip arbitrary file write in @appium/support ZIP extraction6.5 Medium
- hackerbay oneuptimeOneUptime: Path Traversal — Arbitrary File Read (No Auth)7.2 High
- fortinet fortisoar agent communication bridgeAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...5.5 Medium
- flintsh flareFlare has a Path Traversal in /api/avatars/[filename]8.3 High
- vaadin, nextcloud flow +1 moreZip Slip Path Traversal on Node Unpack2.3 Low
- apache software foundation pdfbox examples, apache pdfbox-examples +1 moreApache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code5.3 Medium
- stellarwp the events calendarThe Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_import7.5 High
- harttle liquidjsliquidjs has a path traversal fallback vulnerability8.7 High
- isaacs node-tar, tar +1 morenode-tar Symlink Path Traversal via Drive-Relative Linkpath8.2 High
- owen2345 camaleon cmsCamaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read6.0 Medium
- budibaseBudibase PWA ZIP Upload Path Traversal Allows Reading Arbitrary Server Files Including All Environment Secrets9.6 Critical
- Show moreLoading…