CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- wekanWekan: Arbitrary file read and server DoS via attachment versions.original.path7.1 High
- dataeaseDataEase: Path Traversal Vulnerability8.3 High
- dataeaseDataEase: Arbitrary File Write Vulnerability8.5 High
- apache ivyApache Ivy: PackagerResolver path traversal vulnerability5.4 Medium
- gravity forms formsGravity Forms <= 2.10.4 - Unauthenticated Arbitrary File Read via 'gform_uploaded_files' Parameter7.5 High
- openwrtOpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download4.9 Medium
- splunk, splunk cloud platform, enterprise +2 morePath Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise7.2 High
- cisco ise passive identity connector, identity services engine, identity services engine software +1 more +3 moreCisco Identity Services Engine Path Traversal Vulnerability5.5 Medium
- filebrowserFile Browser: Archive builder turns backslash filenames into path traversal (zip-slip)6.8 Medium
- f5 nginx agent, nginx instance manager +1 moreNGINX Agent Vulnerability5.3 Medium
- preferredai cornacCornac < 2.6.0 Path Traversal via _extract_archive() in download.py8.8 High
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via SkillTools8.6 High
- mastergo-design mastergo-magic-mcpmastergo-design mastergo-magic-mcp mcp__getComponentGenerator component-workflow.md execute path traversal4.8 Medium
- skylot jadxjadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run7.0 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)9.9 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.8 Medium
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)9.1 Critical
- mastergo-design mastergo-magic-mcpmastergo-design mastergo-magic-mcp mcp__C2d get-c2d.ts execute path traversal4.8 Medium
facturascripts/facturascriptsPackagistFacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE9.9 Critical- julien040 anyqueryAnyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode7.5 High
- adobe animate, animate 2023, animate 2024 +2 moreAnimate | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)8.6 High
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)8.6 High
- julien040 anyqueryAnyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode9.1 Critical
facturascripts/facturascriptsPackagistFacturaScripts: Unauthenticated Path Traversal in Static File Controllers Reads Private MyFiles Documents7.5 High- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability5.5 Medium
- No product listedDedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal5.1 Medium
- hmbrand dbd::fileDBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location7.7 High
- os4ed opensis, opensis-classic +1 moreopenSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download5.3 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...5.0 Medium
- rockwell automation studio 5000 logix designerStudio 5000 Logix Designer® – Multiple Vulnerabilities5.4 Medium
- rockwell automation factorytalk thinmanagerThinManager® - Path Traversal via API7.2 High
- tenable agent, nessus agent +1 moreTenable Agent Path Traversal Leading to Remote Code Execution9.3 Critical
- dan-in-ca sip, sustainable irrigation platform +1 moreSustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup Restore8.7 High
- ivanti xtractionPath traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated...7.7 High
- apache openmeetingsApache OpenMeetings: Arbitrary File Read6.5 Medium
- eclipse foundation basyx - java server sdkIn Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments...9.0 Critical
- keras, keras-team keras-team/keras +1 morePath Traversal via Symlink Name Validation Bypass in keras-team/keras3.1 Low
- nextlevelbuilder goclawnextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal5.3 Medium
- cockpit cmsCockpit CMS Path Traversal via Bucket Name in Bucket File Storage API8.7 High
- plank laravel-mediableLaravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath()8.7 High
nukeviet/nukevietPackagistNukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function8.7 High- rejetto hfsRejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter6.9 Medium
- thales cert suspiciousRemote Code Execution vulnerability in "Suspicious" application9.2 Critical
- wpmu dev - your all-in-one wordpress platform forminatorWordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability7.5 High
- wp swings membership for woocommerceWordPress Membership For WooCommerce plugin <= 3.1.0 - Arbitrary File Deletion vulnerability8.6 High
- brainstorm force suredashWordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability9.9 Critical
- adrian tobey groundhoggWordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability8.6 High
- better-auth better-iconsbetter-auth better-icons scan_project_icons/sync_icon path traversal4.8 Medium
- augmnt augments-mcp-serveraugmnt augments-mcp-server scan_project_deps scan-project-deps.ts scanProjectDeps path traversal4.8 Medium
- alioshr memory-bank-mcpalioshr memory-bank-mcp list-project-files-validation-factory.ts path traversal4.8 Medium
- Show moreLoading…