CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- tigera calico, calico cloud, calico enterprise +2 moreL7 policy bypass via unnormalized HTTP path matching7.9 High
- ibm app connect enterpriseIBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability9.8 Critical
- ibm app connect enterpriseIBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings7.5 High
- broadcom vmware vcenter, vmware vcenter, cloud foundation +4 more +6 morevCenter directory-traversal vulnerability9.8 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet5.3 Medium
- asustor inc. adm, asustor data master +1 moreA path traversal vulnerability was found in the IHM Log handling of ADM7.1 High
- asustor inc. adm, asustor data master +1 moreA path traversal vulnerability was found in the Wallpaper component of ADM6.9 Medium
- asustor inc. adm, asustor data master +1 moreA path traversal vulnerability was found in the VPN Clients on the ADM7.0 High
- drivelockDriveLock Directory Traversal Information Disclosure Vulnerability6.5 Medium
- drivelockDriveLock Directory Traversal Information Disclosure Vulnerability7.5 High
- drivelockDriveLock Directory Traversal Information Disclosure Vulnerability5.3 Medium
- drivelockDriveLock Directory Traversal Information Disclosure Vulnerability7.5 High
- flytohub flyto-coreFlyto2 Core: Arbitrary file write via image.download (and other file-writing modules)10.0 Critical
- develar app-builderDevelar's electron-builder allows arbitrary file overwrite6.5 Medium
activerecord-tenantedRubyGemsActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal2.3 Low- brightio penelopePenelope unsafe tar extraction allows arbitrary local file write via crafted session archive5.9 Medium
- balbooa gridbox, balbooa.com gridbox extension for joomla +1 moreJoomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.29.2 Critical
- balbooa gridbox, balbooa.com gridbox extension for joomla +1 moreJoomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.29.2 Critical
- unknown wp-media-folder-addonMedia folder Addon < 4.1.7 - Unauthenticated Arbitrary File Download8.6 High
- ddnexus pagyPagy I18n locale option is not validated before being used in a file path6.9 Medium
- bablilayoub openholeopenhole-server vulnerable to path traversal via URL-decoded request path8.6 High
- goshs-labs goshsgoshs has ACL Bypass & Path Traversal5.3 Medium
- goshs-labs goshsgoshs has a Path Traversal issue6.5 Medium
- koxudaxi datamodel-code-generatordatamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`7.5 High
- koxudaxi datamodel-code-generatorArbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate7.5 High
- ibm aspera, aspera desktop app +1 morePath Traversal in IBM Desktop App9.3 Critical
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability7.5 High
- softaculous speedycache – cache, optimization, performanceSpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read4.9 Medium
- adobe bridgeBridge | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.8 High
- generalsandman tinywebTinyWeb 0.0.8 Path Traversal via URL Path Component8.7 High
- pionxzh wakaru@wakaru/cli arbitrary file write during bundle unpack7.1 High
- mattermost, mattermost server +1 moreSAML certificate deletion allows path traversal to delete arbitrary files outside the config directory5.5 Medium
- wordplus better messages – chat rooms, group chat, private messages & ai chat botsBetter Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameter7.2 High
- deveasel demi – one click demo import, backup & site migrationDemi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action7.5 High
- No product listedVersions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the...8.7 High
- apple ipados, macos, tvos +2 more +4 moreA parsing issue in the handling of directory paths was addressed with improved path validation....9.3 Critical
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS...9.8 Critical
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....7.8 High
- apple macosA path traversal issue was addressed with improved input validation. This issue is fixed in macOS...8.2 High
- apple ipados, macos, tvos +4 more +6 moreA path handling issue was addressed with improved validation. This issue is fixed in iOS 26.6 and...7.8 High
- jfrog artifactoryPotential path traversal leading to unauthorized file writes8.8 High
- thorsten phpmyfaqphpMyFAQ before 4.1.6 Path Traversal via category image deletion8.6 High
- nitroshare nitroshare-desktopNitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server8.7 High
- easy digital downloads digital downloads, syed balkhi easy digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability4.9 Medium
- themeum kirkiWordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability6.8 Medium
- zjonsson node-unzipperZJONSSON node-unzipper extract.js Extract path traversal4.8 Medium
- joomshaper.com sp page builder extension for joomlaJoomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.18.3 High
- zte blade a75 5gPath Traversal Vulnerability in ZTE Blade A75 5G1.8 Low
- phoca.cz phoca commander extension for joomlaJoomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.16.9 Medium
- themehigh checkout field editor for woocommerce (pro)Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter6.5 Medium
- Show moreLoading…