CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- fluent fluentdFluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder9.8 Critical
- labstack echoEcho: Encoded slash (%2F) bypasses route-level protection and exposes static files7.5 High
- icc0rz h5pWordPress H5P plugin <= 1.17.7 - Arbitrary File Deletion vulnerability7.1 High
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerability5.8 Medium
- mattermost github.com/mattermost/mattermost/server/publicClient4 fails to validate path parameters5.4 Medium
- apache software foundation iotdbApache IoTDB: Path Traversal Vulnerability9.1 Critical
- apache software foundation iotdbApache IoTDB: Path Traversal Vulnerability9.1 Critical
- geovision inc. gv-lpclpc2011/2211GV-LPC2011/LPC2211 - unauthorized directory traversal vulnerability (get_fcont.cgi)7.5 High
- cactiCacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter6.5 Medium
- pydicom pynetdicom librarypydicom pynetdicom Library Path Traversal8.8 High
- anysphere cursorCursor Desktop sandbox escape via agent-controlled working directory9.3 Critical
- seaweedfsSeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body Keys7.2 High
- seaweedfsSeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access7.8 High
- k3sK3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression5.8 Medium
- filebrowserFile Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup8.2 High
- pnpmpnpm: Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)7.3 High
- pnpmpnpm: stage download writes outside destination via manifest version traversal7.1 High
- pnpmpnpm: reserved bin name deletes PNPM_HOME during global remove6.5 Medium
- aquasec trivyTrivy: Path traversal via a crafted vulnerability database or other downloaded artifacts7.0 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: information disclosure through arbitrary filesystem path probing4.9 Medium
- halo-dev haloHalo: Path Traversal in Backup Download Leads to Arbitrary File Read5.5 Medium
- danpros htmlyHTMLy CMS 3.1.1 Path Traversal via oldfile Parameter in Autosave7.2 High
- getk2.com k2 extension for joomla, joomlaworks k2 +1 moreJoomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.266.5 Medium
- rickknowles winstone servlet containerWinstone Servlet Engine 0.9.10 Path Traversal via HTTP Request Paths8.7 High
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a...7.2 High
- ahmad js help deskWordPress JS Help Desk plugin <= 3.1.1 - Arbitrary File Deletion vulnerability7.7 High
- rapid7 insightconnect compression plugin, insightconnect compression +1 morePath Traversal in Rapid7 InsightConnect Compression Plugin3.3 Low
- gnu sed, rapid7 insightconnect sed plugin +1 moreArbitrary File Read in Rapid7 InsightConnect Sed Plugin6.5 Medium
- gnu sed, rapid7 insightconnect sed plugin +1 moreArbitrary File Write in Rapid7 InsightConnect Sed Plugin7.1 High
- cactiCacti: Unauthenticated RCE on Graph Image9.8 Critical
- cactiCacti: Path Traversal via filename parameter in package_import.php6.9 Medium
- aten unizonATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability7.2 High
- aten unizonATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability7.2 High
- aten unizonATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability7.5 High
- aten unizonATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability5.5 Medium
- aten unizonATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability5.5 Medium
- chromedevtools chrome-devtools-mcpchrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots6.1 Medium
- siyuan-note siyuanSiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)7.5 High
- jellyfinJellyfin: Potential MKV attachment filename path traversal to RCE1.7 Low
- jellyfinJellyfin: Potential Authenticated path traversal in /ClientLog/Document8.8 High
- mintplex-labs anything-llmAnythingLLM: Windows path containment bypass in document folder route4.3 Medium
- jenkins project external workspace manager pluginJenkins External Workspace Manager Plugin has a path traversal vulnerability8.8 High
motioneyePyPImotionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)9.8 Critical- motioneye-project motioneyemotionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read7.7 High
- jdx misemise HTTP backend uses raw version path for install symlink destination5.5 Medium
- nicolargo glancesGlances: Arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration7.8 High
- gogsGogs: UploadRepoFiles writes outside repo working tree via committed parent sym9.0 Critical
- python software foundation cpythontarfile extraction filter bypass allows escaping the destination directory7.8 High
- budibaseBudibase: Arbitrary file read by workspace-builder via PWA-zip symlink upload9.6 Critical
skillctlcrates.ioskillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgeryNo score- Show moreLoading…