CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- woocommerce-csvimport woocommerce csv-importerWoocommerce CSV Importer 3.3.6 Path Traversal File Deletion8.7 High
- oinone pamirsOinone Pamirs RestController LocalFileClient.java request.getParameter path traversal2.4 Low
- gotmls malware security and bruteforce firewallWordPress Anti-Malware Security Bruteforce Firewall <= 4.20.72 Directory Traversal8.7 High
- hacs home assistant community store, home-assistant home assistant community store (hacs) +1 moreHome Assistant Community Store 1.10.0 Path Traversal Account Takeover8.7 High
- miniorange backup and restoreWordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion8.7 High
- boxlite-ai boxliteBoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the Host9.6 Critical
- simplesamlphp simplesamlphp-module-casserverSimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion8.6 High
- pipecatPipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator7.5 High
- microsoft apmMicrosoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`5.5 Medium
- dhtmlx pdf export modulePath Traversal in PDF Export Module9.2 Critical
- dhtmlx diagramPath Traversal in Diagram9.2 Critical
- davidfcarr quick playgroundQuick Playground <= 1.3.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'stylesheet' Parameter7.5 High
- theonedev onedevOneDev: Path Traversal (read capability via Git LFS pointer resolution)7.1 High
- go-git go-billyBilly: Path traversal vulnerabilities8.1 High
- badgerati podePode: Directory Traversal is possible on Static Routes6.9 Medium
- portainerPortainer: Path traversal in backup archive extraction allows arbitrary file write5.5 Medium
- squinky86 stigqterSTIGQter: Arbitrary File Write leading to Local Code Execution via Export HTML8.4 High
- strapiStrapi may leak sensitive data via relational filtering due to lack of query sanitization9.2 Critical
- erolsk8 media syncMedia Sync <= 1.4.9 - Authenticated (Author+) Path Traversal via 'sub_dir' and 'media_items' Parameters6.5 Medium
- frappe erpnextERPNext: Path Traversal Leading to Sensitive File Exposure6.5 Medium
- nesquena hermes-webuiHermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint6.0 Medium
- fabrikar com fabrikJoomla com_fabrik 3.9.11 Directory Traversal via image.php8.7 High
- lenovo home storage hub t20, home storage hub x20, personal cloud a1 +7 more +9 moreA potential improper file path validation vulnerability was reported in some Lenovo Personal...8.6 High
- f5 big-iq, big-iq centralized management +1 moreBIG-IQ iControl REST vulnerability7.2 High
- f5 big-ip, big-ip ssl orchestrator, ssl orchestrator +2 moreBIG-IP SSL Orchestrator vulnerability6.9 Medium
- openplcproject openplc v3 firmwareA path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as...6.5 Medium
- sillytavernSillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')9.1 Critical
- esm-dev esm.shesm.sh: Path Traversal via package.json browser field allows reading arbitrary server files7.5 High
- esm-dev esm.shesm.sh: Legacy Route Path Traversal Can Lead to RCE8.7 High
- heymrun heymHeym < 0.0.21 Path Traversal File Upload via upload_file()7.2 High
- enesgkky pulpyPulpy: Incomplete filesystem sandbox in pulpy.fs bridge allows packaged web apps to read arbitrary user files9.3 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)8.7 High
- hashicorp nomad, nomad enterprise +1 moreNomad vulnerable to path traversal in dynamic host volume which may lead to code execution8.8 High
- adobe substance 3d designerSubstance3D - Designer | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.3 Medium
- microsoft .net, .net 10.0, .net 8.0 +6 more +8 more.NET Core Tampering Vulnerability4.3 Medium
- microsoft live preview, visual studio code - live preview extension +1 moreVisual Studio Code Information Disclosure Vulnerability5.5 Medium
- dragonmonk111 junoclawJunoClaw: upload_wasm accepted arbitrary filesystem paths without validation8.5 High
- schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller, saitel dp remote terminal unit & controller +1 moreImproper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products7.1 High
- chitora soft lhaz, lhaz+ +1 moreThe automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path...4.6 Medium
- fccview jottyjotty·page: Unauthenticated Path Traversal leads to sensitive file disclosure and session-token reuse impact8.2 High
- outlineOutline: Zip Extraction Path Escape via PATH_MAX Truncation in Collection Import8.7 High
- advplyr audiobookshelfAudiobookshelf: Path Traversal vulnerability in the audiobookshelf project6.9 Medium
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....7.8 High
- advplyr audiobookshelfAudiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence4.3 Medium
- kysely-org kyselyKysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more +4 moreArbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow7.5 High
- alfredredbird tookie-osintTookie: Arbitrary file write via path traversal in -u username / -U userfile output filename6.7 Medium
- openclaw crabboxCrabbox < 0.9.0 Path Traversal via Islo Provider Workspace Resolution6.8 Medium
- casbin casdoorCVE-2026-68155.9 Medium
- jg-rp liquid, python liquid +1 morePython Liquid: Absolute paths escape filesystem loader search path8.2 High
- Show moreLoading…