CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- linuxcontainers incusAbitrary file write through systemd-creds option10.0 Critical
- shaneisrael fireshareFireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`7.1 High
- moby buildkitBuildKit Git URL subdir component can cause access to restricted files8.2 High
- moby buildkitBuildKit vulnerable to malicious frontend causing file escape outside of storage root8.4 High
- openclawOpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read8.7 High
- mattermost, mattermost server +1 moreArbitrary File Read via Advanced Logging Support Packet6.8 Medium
- smallsrv small http, small http server +1 moreMultiple vulnerabilities in Small HTTP server by Smallsrv8.7 High
- wpjobportal wp job portal – ai-powered recruitment system for company or job board websiteWP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field8.8 High
- saloonSaloon has a Fixture Name Path Traversal Vulnerability8.0 High
- sonarrSonarr Path Traversal vulnerability8.6 High
- tobychui zoraxyZoraxy: Authenticated Path Traversal in Config Import leads to RCE3.3 Low
- code16 sharpSharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil8.8 High
- b3log siyuanSiYuan has directory traversal within its publishing service9.8 Critical
- icopydoc yml for yandex marketWordPress YML for Yandex Market plugin < 5.3.0 - Arbitrary File Deletion vulnerability6.8 Medium
- vanquish woocommerce support ticket systemWordPress WooCommerce Support Ticket System plugin < 18.5 - Arbitrary File Deletion vulnerability8.6 High
- nysl spam protect for contact form 7WordPress Spam Protect for Contact Form 7 plugin <= 1.2.9 - Arbitrary File Deletion vulnerability6.8 Medium
- whitebox-studio scapeWordPress Scape theme < 1.5.16 - Arbitrary File Deletion vulnerability8.6 High
- aa-team wzoneWordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability8.8 High
- add-ons.org product file upload for woocommerceWordPress Product File Upload for WooCommerce plugin <= 2.2.4 - Arbitrary File Deletion vulnerability6.8 Medium
- designingmedia energoxWordPress Energox theme <= 1.2 - Arbitrary File Deletion vulnerability7.7 High
- designingmedia instant vaWordPress Instant VA theme <= 1.0.1 - Arbitrary File Deletion vulnerability7.7 High
- flexcubed pitchprintWordPress PitchPrint plugin <= 11.1.2 - Arbitrary File Deletion vulnerability7.5 High
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS...4.0 Medium
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....9.3 Critical
- apple ipados, macos, visionos +2 more +4 moreA path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and...9.3 Critical
- pf4j project pf4jpf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names7.5 High
- codehaus-plexus plexus-utils, red hat cryostat 4, openshift developer tools and services +49 more +51 morePlexus-Utils has a Directory Traversal vulnerability in its extractFile method8.8 High
- error311 fileriseFileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle8.1 High
- godoxyGoDoxy has a Path Traversal Vulnerability in its File API6.5 Medium
- teamjcd joycondroidPath Traversal Vulnerability in TeamJCD/JoyConDroid8.6 High
- spring cloud, vmware spring cloud config +1 moreSpring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks8.6 High
- rubyonrails rails, rails activestorage, red hat 3scale api management platform 2 +2 moreRails Active Storage has possible Path Traversal in DiskService8.0 High
- census cswebCensus CSWeb path traversal8.7 High
- blinkoBlinko: Unauthorized Path Traversal File Enumeration - music-metadata6.9 Medium
- cern indicoIndico discloses local files resulting in Remote Code Execution through LaTeX injection7.7 High
- blinkoBlinko: Authenticated Arbitrary File Write - saveAdditionalDevFile5.3 Medium
- blinkoBlinko: Authenticated Arbitrary File Write - saveDevPlugin5.3 Medium
- blinkoBlinko: Unauthorized Arbitrary File Read - /plugins6.9 Medium
- blinkoBlinko: Unauthorized Arbitrary File Read - /api/file/temp8.2 High
- wwbn avideoAVideo has Path Traversal in pluginRunDatabaseScript.json.php Enables Arbitrary SQL File Execution via Unsanitized Plugin Name7.2 High
- netnumber titan enum/dns/npNetNumber Titan Master 7.9.1 Path Traversal via drp7.1 High
- siteserver sscmsSSCMS layerImage Endpoint LayerImageController.Submit.cs path traversal5.3 Medium
- codnloc phptransformerphpTransformer 2016.9 Directory Traversal via jQueryFileUpload8.7 High
- codnloc phptransformerphpTransformer 2016.9 SQL Injection via GeneratePDF.php8.8 High
- seotoaster, seotoaster ecommerce +1 moreSeoToaster Ecommerce 3.0.0 Local File Inclusion via backend_theme6.8 Medium
- greencms green cms, njtech greencms +1 moreGreen CMS 2.x Path Traversal Arbitrary File Download7.1 High
- roxnor emailkit – email customizer for woocommerce & wpEmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter4.9 Medium
- fahadmahmood keep backup dailyKeep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameter2.7 Low
- halloyHalloy has a file transfer path traveral vulnerability8.7 High
- kubernetes csi driver for nfsCSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server6.5 Medium
- Show moreLoading…