CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- black lantern security bbotArbitrary File Write in postman_download module6.5 Medium
- black lantern security bbotSymlink-following arbitrary write via github_workflows module2.2 Low
- black lantern security bbotPath Traversal (Zip-Slip) in unarchive module5.3 Medium
- cakephpCakePHP: View::element() is missing a path containment check6.3 Medium
- typemillTypemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()7.1 High
- hackplayers evil-winrmEvil-WinRM - Path Traversal in download_dir() Function7.4 High
- jknack handlebars.javahandlebars.java FileTemplateLoader Path Traversal7.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal7.7 High
- cisco identity services engine, identity services engine software, ise passive identity connector +1 more +3 moreCisco Identity Services Engine Remote Code Execution Vulnerability9.1 Critical
- open-webui, openwebui open webui +1 moreOpen WebUI: Sibling-Prefix Path Traversal via /cache/{path} in open-webui/open-webui4.3 Medium
- emv jobcareerWordPress JobCareer theme <= 7.3 - Arbitrary File Deletion vulnerability8.6 High
- purethemes workscout-coreWordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability6.5 Medium
- themefusion fusion builderWordPress Fusion Builder plugin <= 3.15.4 - Arbitrary File Deletion vulnerability7.7 High
- chatbot for wordpress - wpbot conversational forms for chatbotWordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerability7.5 High
- client portal ltd. portal (pro)WordPress Client Portal (Pro) plugin <= 5.6.2 - Arbitrary File Download vulnerability6.5 Medium
- ovatheme bookproWordPress BookPro plugin <= 1.1.0 - Arbitrary File Deletion vulnerability8.6 High
- wpos woocommerce book priceWordPress Woocommerce Book Price plugin <= 1.3 - Arbitrary File Download vulnerability7.5 High
- joomunited wp media folder addonWordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerability7.5 High
- quantumcloud wpbot pro wordpress chatbotWordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability7.7 High
- dassault systèmes solidworks visualizePath Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 20269.8 Critical
- apache apache-airflow-providers-sftp, apache software foundation airflow sftp provider +1 moreApache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names9.1 Critical
pdfkitDebianpdfkit: Path traversal in from_string8.4 High- gogsGogs: Overwriting critical files results in a denial of service8.5 High
- runtipiRuntipi: Unauthenticated arbitrary file read through app-store logo symlinks6.5 Medium
- caddyserver caddyCaddy: Windows `file_server` path authorization bypass via encoded backslash7.5 High
- truelockmc streambertStreambert: Arbitrary File Write (Zip Slip) via Subtitle Extraction10.0 Critical
- crawl4aiCrawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU9.2 Critical
- aivahthemes car zoneWordPress Car Zone theme <= 3.7 - Arbitrary File Deletion vulnerability8.6 High
- extendons wordpress & woocommerce scraper plugin, import data from any siteWordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin <= 1.0.7 - Arbitrary File Download vulnerability7.5 High
- crawl4aiCrawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints9.2 Critical
- crawl4aiCrawl4AI - Authentication Bypass via Hardcoded JWT Signing Key9.3 Critical
- crawl4aiCrawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint9.2 Critical
- crawl4aiCrawl4AI - Stored Cross-Site Scripting in Monitor Dashboard5.3 Medium
- crawl4aiCrawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server6.9 Medium
- crawl4aiCrawl4AI - Server-Side Request Forgery via Webhook URLs9.2 Critical
- crawl4aiCrawl4AI - Arbitrary File Write via output_path Parameter8.8 High
- langchain langgraph-sdk, langchain-ai, langchain-ai langchain-sdk +2 moreLangGraph SDK has unsafe URL path construction4.2 Medium
- denoDeno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions5.5 Medium
- n8nn8n: Git Node Clone and Push Operations Bypass File Sandbox6.0 Medium
- langflowLangflow: Path Traversal in Knowledge Bases API via Creation Endpoint6.5 Medium
- containers buildahBuildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive6.3 Medium
- langchain, langchain-ai langchain-anthropic +1 moreLangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders5.1 Medium
- nltk, red hat exploit intelligence, openshift lightspeed +4 more +6 moreNLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read7.5 High
- honojs honoHono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)5.9 Medium
- https://wpreviewslider.com/ wp review slider proWP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter8.1 High
- wp user manager user managerWordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability9.9 Critical
- wpclever wpc product options for woocommerceWordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability7.5 High
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability7.7 High
- satinder singh contact form extender for divi – save entries, file upload & country code fieldWordPress Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field plugin <= 1.0.6 - Arbitrary File Deletion vulnerability8.6 High
- adrian tobey groundhoggWordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability7.7 High
- Show moreLoading…