CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- openwebui open webui, open-webui +1 moreOpen WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal8.1 High
- growi, inc. growiPath traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to...8.6 High
- npitre cramfs-toolsnpitre cramfs-tools Directory cramfsck.c do_directory path traversal4.8 Medium
- No product listeddocuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing...7.5 High
- amministrazione-apertaWordPress Plugin amministrazione-aperta 3.7.3 Local File Read6.9 Medium
- industrial application software ias canias erpIndustrial Application Software IAS Canias ERP RMI iasRequestFileEvent path traversal6.9 Medium
- adamhathcock sharpcompressSharpCompress: Directory traversal via directory entries in WriteToDirectory (zip slip variant)5.9 Medium
- github view componentview_component: System Test Entry Point Path Check Allows Sibling Directory Escape5.9 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Arbitrary File Upload and Path Traversal7.3 High
- anzory solidcam-gppl-ideSolidCAM-GPPL-IDE: Path traversal in `inc` directive enables file probing and NTLM-hash leak5.1 Medium
- smartertools smartermailSmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} API8.7 High
potato-annotationPyPI`potato-annotation` has a Project-Boundary Bypass5.1 Mediumn8n-mcpnpmn8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure8.3 High- novafacile novagallerynovaGallery: Unauthenticated Path Traversal in Album and Cached Image Routes Allows Reading Images Outside Gallery Root5.3 Medium
- mervinpraison praisonaiPraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`8.7 High
- mervinpraison praisonaiPraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection9.4 Critical
- acer predatorsense, predatorsense v3, nitrosense +2 morePredatorSense V3: Local Privilege Escalation (LPE) vulnerability8.5 High
- kimaiKimai: Arbitrary file read in invoice PDF renderer (admin)4.1 Medium
- electermelecterm: Path traversal in electerm runWidget leads to arbitrary code execution8.4 High
- streamlinkStreamlink: Arbitrary local file read via file:// URI in HLS and DASH6.5 Medium
dash-uploaderPyPIdash-uploader has a directory traversal vulnerability9.8 Critical- huangjunsen0406 xiaozhi-mcphubhuangjunsen0406 xiaozhi-mcphub dxtController.ts path traversal5.3 Medium
- gyoridavid short-video-makergyoridavid short-video-maker REST API rest.ts path traversal6.9 Medium
mcp-ssh-toolnpmmcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening8.7 High- microsoft apmMicrosoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during install7.1 High
- 8421bit miniclaw8421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal5.3 Medium
- enchant97 note-markNote Mark: Arbitrary File Write via Path Traversal in Asset Names Leading to Remote Code Execution8.6 High
- davidanderson wp-optimize – cache, compress images, minify & clean database to boost page speed & performanceWP-Optimize <= 4.5.2 - Authenticated (Author+) Arbitrary File Deletion via 'original-file' Post Meta8.1 High
- spring cloud config, vmware spring cloud config, red hat enterprise linux 8 +1 more +3 moreSpring Cloud Config vulnerable to Path Traversal9.1 Critical
- gtsteffaniak filebrowser, filebrowser quantum +1 moreFileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion9.1 Critical
- gotenbergGotenberg: Arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and convert routes5.3 Medium
- angular angular-cli, cli +1 moreAngular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix6.9 Medium
- nitro, nitrojs nitropack +1 moreNitro: Proxy scope bypass via percent-encoded path traversal in `routeRules`5.3 Medium
- sqlalchemy makoMako: Path traversal via backslash URI on Windows in TemplateLookup8.7 High
- flightphp coreFlight: Path traversal in `make:controller` CLI creates arbitrary directories outside project root4.4 Medium
- gohugo hugoHugo: Node tool execution allows file system access outside the project directory6.2 Medium
- thorsten phpmyfaqphpMyFAQ - Path Traversal in Client::deleteClientFolder via URL Parameter7.0 High
- magic-wormholewormhole receive, with --output pointing at an existing directory can be path-traversed3.5 Low
- gitpython-developers gitpythonGitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository7.8 High
- nanoco nanoclawNanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling9.3 Critical
- apache wicketApache Wicket: Possible malicious path traversal in FolderUploadsFileManager6.5 Medium
- oracle cloud infrastructure cli, oracle corporation oci cli of oracle open source projects +1 moreVulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported...6.1 Medium
- techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builderFluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment4.9 Medium
- getgrav gravGrav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.8.8 High
- pyload, pyload-ng project pyload-ng +1 morepyLoad: Path Traversal via Package Folder Name in set_package_data8.1 High
- pyload, pyload-ng project pyload-ng +1 morepyLoad: Path Traversal via Package Folder Name6.5 Medium
- bx33661 wireshark-mcp, wireshark mcp +1 moreWireshark MCP: Arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured6.8 Medium
- codingjoe django-s3filedjango-s3file: Relative path traversal9.9 Critical
- minioMinIO: Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint6.9 Medium
- gitoxidelabs gitoxidegitoxide before 0.52.1 Path Traversal via Submodule Name8.7 High
- Show moreLoading…