CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- filebrowserFile Browser has an access rule bypass via HasPrefix without trailing separator in path matching6.3 Medium
- pyload, pyload-ng project pyload-ng +1 morepyLoad has an Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass5.3 Medium
- nationalsecurityagency emissaryEmissary has a Path Traversal via Blacklist Bypass in Configuration API5.3 Medium
- oobabooga text-generation-webui, text generation web ui +1 moretext-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication5.3 Medium
- oobabooga text-generation-webui, textgen +1 moretext-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication7.5 High
- oobabooga text-generation-webui, textgen +1 moretext-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication5.3 Medium
- oobabooga text-generation-webui, textgen +1 moretext-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication5.3 Medium
- apache activemq, activemq broker, activemq web +2 more +4 moreApache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory4.3 Medium
- mervinpraison praisonaiPraisonAI has a Path Traversal in FileTools9.2 Critical
- mervinpraison praisonaiPraisonAI recipe registry publish path traversal allows out-of-root file write7.1 High
- mervinpraison praisonaiPraisonAI recipe registry pull path traversal writes files outside the chosen output directory7.3 High
- mervinpraison praisonaiArbitrary File Write / Path Traversal in Action Orchestrator9.0 Critical
- mervinpraison praisonaiPraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction8.1 High
- kedro-org kedro-pluginsKedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write6.5 Medium
- kedro-org kedro-datasetskedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name7.1 High
- chyrplite chyrp lite, xenocrat chyrp-lite +1 moreChyrp Lite has a Path Traversal to Remote Code Execution9.1 Critical
- vimPath traversal issue with zip.vim in Vim4.1 Medium
- oobabooga text-generation-webui, textgen +1 moretext-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".9.1 Critical
- heriklyma cppwebframeworkHerikLyma CPPWebFramework path traversal6.9 Medium
- griptape-ai griptapegriptape-ai griptape ComputerTool tool.py path traversal5.3 Medium
- wisdom pegasus cmsPegasus CMS 1.0 Remote Code Execution via extra_fields.php9.3 Critical
- va max maxVA MAX 8.3.4 Remote Code Execution via changeip.php8.7 High
- griptape-ai griptapegriptape-ai griptape FileManagerTool save_memory_artifacts_to_disk path traversal5.3 Medium
- fedml-ai fedmlFedML-AI FedML MQTT Message FileUtils.java path traversal5.3 Medium
- tomdever wpforo forumwpForo Forum <= 2.4.16 - Authenticated (Subscriber+) Arbitrary File Deletion via Post Body8.8 High
- coder code-marketplaceCode Extension Marketplace has a Zip Slip Path Traversal8.7 High
- emlogEmlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCE7.2 High
- goshsImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs9.8 Critical
- openprinting cupsOpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)6.5 Medium
- zulipZulip: Path Traversal in Import6.1 Medium
- f prompts.chatprompts.chat Path Traversal via Skill File Handling8.6 High
- budibaseBudibase: Path traversal in plugin file upload enables arbitrary directory deletion and file write8.7 High
- perfmattersPerfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter8.1 High
- goshsImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload9.8 Critical
- goshsgoshs has an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs PUT Upload9.8 Critical
- kedro-org kedroKedro has a path traversal in versioned dataset loading via unsanitized version string7.1 High
- openclawOpenClaw < 2026.3.31 - Path Traversal via Inbound Channel Attachment Path in ACP Dispatch7.1 High
- stackfieldThe Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal...9.6 Critical
- kovai biztalk360An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input...8.3 High
- kovai biztalk360An issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input...6.8 Medium
- shaneisrael fireshareUnauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/public9.1 Critical
- endian firewall, firewall community +1 moreEndian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory Traversal7.1 High
- No product listedTextpattern XML-RPC TXP_RPCServer.php mt_uploadImage path traversal5.3 Medium
- opencartOpenCart Extension Installer installer.php path traversal5.1 Medium
- inc2734 mw wp formMW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir8.1 High
- linuxfoundation onnxONNX symlink-following and path-traversal arbitrary file write6.8 Medium
- montferret ferretFerret has a Path Traversal in IO::FS::WRITE allows arbitrary file write when scraping malicious websites8.1 High
- copier-org copierCopier `_external_data` allows path traversal and absolute-path local file read without unsafe mode5.5 Medium
- phpmyfaqphpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController8.7 High
- copier-org copierCopier `_subdirectory` allows template root escape via parent-directory traversal4.4 Medium
- Show moreLoading…