CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- nousresearch hermes-agentNousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal6.9 Medium
taropamIn OCaml-tar before 3.4.0, a crafted archive with ../ path segments in its name allows escaping...9.1 Critical- gtsteffaniak filebrowserFileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory9.3 Critical
- free5gc udm, udr, ubiquiti inc efg +58 more +60 moreA malicious actor with access to the network and low privileges could exploit a Path Traversal...7.7 High
- ubiquiti unifi os, @clerk express, free5gc udm +61 more +63 moreA malicious actor with access to the network could exploit a Path Traversal vulnerability found...10.0 Critical
- No product listedDirectory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain...6.5 Medium
- No product listedDirectory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5...7.5 High
- msiemens rust onenote file parser, onenote.rs +1 moreRust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory4.4 Medium
github.com/mvt-project/androidqfGoandroidqf: APK download Path Traversal in device APK paths1.1 Lowgithub.com/mvt-project/androidqfGoandroidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers)1.1 Low- mvt-project mvtMobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing5.3 Medium
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA vulnerability in the Trend Micro Apex One management console could allow a remote attacker to...9.8 Critical
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA vulnerability in the Trend Micro Apex One management console could allow a remote attacker to...9.8 Critical
- mattermost, mattermost server +1 morePath traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.8.0 High
- netatalkEA path traversal via incomplete sanitization7.6 High
- frappe lmsFrappe has Path Transversal via SCORM9.4 Critical
- elated-themes frappeFrappe has an Arbitrary File Read via Path Traversal in render_include8.7 High
- altium enterprise serverPath Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read9.4 Critical
- altium enterprise serverPath Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write9.4 Critical
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path...7.5 High
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path...5.3 Medium
- triliumnext triliumTrilium Notes has Local File Inclusion via upload modified file API endpoint6.8 Medium
- facelessuser pymdown extensions, pymdown-extensions +1 morePyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path4.3 Medium
- wwbn avideoWWBN AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in `view/img/image404Raw.php`6.9 Medium
- n8nn8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter5.3 Medium
- axllent mailpitMailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs5.9 Medium
land.oras:oras-java-sdkMavenORAS Java: Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation8.1 High- netfoundry zrokzrok copy writes attacker-controlled WebDAV paths outside the destination root8.3 High
- go-gitgo-git: Crafted repositories may modify main and submodule .git directories5.4 Medium
- netfoundry zrokzrok Python ProxyShare can be used as an SSRF proxy through absolute URL paths9.9 Critical
- typo3 extension "faceted search"Path Traversal in extension "Faceted Search" (ke_search)5.9 Medium
- apache ofbizApache OFBiz: Path Traversal and File Upload Validation Bypass Leading to Arbitrary File Write, Stored XSS and RCE in Catalog Manager6.1 Medium
- apache ofbizApache OFBiz: Low-Privilege LFI in Content Component6.5 Medium
- No product listedAn authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up...9.8 Critical
github.com/itang/gohttpGo,govulncheck-vulndbopenSUSE +1 moregohttp is vulnerable to directory traversal via a crafted request7.3 High- jarrodwatts claude hud, claude-hud +1 moreClaude HUD 0.0.12 Path Traversal via transcript_path4.8 Medium
- wwbn avideoWWBN AVideo: Authenticated Arbitrary File Read in view/update.php6.9 Medium
- dumbwareio dumbassetsDumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-file8.8 High
- cloakhq cloakbrowserCloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion8.8 High
- apple private cloud compute server software, private cloud compute +1 moreAn attacker in a privileged network position may be able to leak sensitive information. A path...6.5 Medium
- opensourcepos open source point of saleopensourcepos Open Source Point of Sale Items.php getPicThumb path traversal5.3 Medium
- unknown wp mapsWP Maps < 4.9.3 - Subscriber+ Local File Inclusion7.5 High
- hsclabs mailinspectorHSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user...7.5 High
- continuecontinuedev continue JSON-RPC Server lsTool.ts lsTool path traversal4.8 Medium
- kilo code, kilo-org kilocode +1 moreKilo-Org kilocode File Diff API Endpoint worktree-diff.ts Bun.file path traversal5.3 Medium
- adenhq hiveadenhq hive Delete Request routes_sessions.py _read_events_tail path traversal6.9 Medium
- fishaudio bert-vits2fishaudio Bert-VITS2 Gradio webui_preprocess.py generate_config path traversal6.9 Medium
- fishaudio bert-vits2fishaudio Bert-VITS2 Model hiyoriUI.py _get_all_models path traversal6.9 Medium
- astrbotdevs astrbotAstrBotDevs AstrBot File Upload chat.py post_file path traversal5.3 Medium
- wp-google-drive google driveGoogle Drive for WordPress 2.2 Path Traversal RCE via gdrive-ajaxs.php8.7 High
- Show moreLoading…