CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- gitpython-developers gitpythonGitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name8.4 High
- smarty-php smartySmarty Security stream restriction bypass through stream: resource6.9 Medium
- smarty-php smartySmarty: Symlink path traversal out of trusted directories6.9 Medium
- gitroomhq postiz-appUnauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover9.3 Critical
- seblod.com seblod extension for joomlaJoomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.19.2 Critical
- phoca.cz phoca commander extension for joomlaJoomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.38.2 High
- phoca.cz phoca commander extension for joomlaJoomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.36.1 Medium
- phoca.cz phoca commander extension for joomlaJoomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.36.4 Medium
- unknown wp mapsWP Maps < 4.9.7 - Subscriber+ Local File Inclusion8.8 High
- microsoft application insights profilerApplication Insights Profiler Elevation of Privilege Vulnerability8.8 High
- craftcms cmsCraft CMS 5.0.0-RC1 before 5.10.6 Path Traversal via ensurePathIsContained6.9 Medium
- nrwl nxNx: Zip-Slip in the self-hosted remote cache8.7 High
- cloud foundry boshArbitrary Root File Write via Path Traversal in BOSH agent4.2 Medium
- cliGitHub CLI: Unescaped variable components in request URLs could allow path traversal5.1 Medium
- ankitects ankiAnki's local HTTP server is vulnerable to directory traversal attacks5.9 Medium
- foundationagents metagptFoundationAgents MetaGPT editor.py read path traversal4.8 Medium
- lspace-io lspace-serverLspace-io lspace-server Repositories File API repository.ts deleteFile path traversal4.8 Medium
- @fastify/static, fastify fastify-static +1 more@fastify/static vulnerable to route guard bypass via non-canonical path segments7.5 High
- noctedefensor ludusmcpNocteDefensor LudusMCP ludus_environment_guides_search ludusEnvironmentGuidesSearch.ts path traversal4.8 Medium
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability6.5 Medium
- bohdan triapitsyn openchamberOpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter9.3 Critical
- monomythdevelopment la-forge-mcpMonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversal5.3 Medium
- nanocoai nanoclawnanocoai NanoClaw send_file core.ts path traversal6.9 Medium
- rclonerclone: Local Encoding Path Traversal6.9 Medium
- rclonerclone serve s3 Path Traversal via dot-dot object keys6.9 Medium
- innocommerce innoshopyushine InnoShop Files Endpoint panel-api.php destroyFiles path traversal5.3 Medium
- rclonerclone: Incomplete path validation allows backend root escape in serve restic8.6 High
- github enterprise serverPath traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header8.8 High
- aws aws-transform-mcp-server, amazon aws transform mcp server +1 moreImproper limitation of a pathname to a restricted directory in aws-transform-mcp-server6.3 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement7.7 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement5.4 Medium
- jenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting...4.3 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by security vulnerabilities in Model Context Protocol features6.5 Medium
- progress marklogic serverCross-site scripting in Progress MarkLogic Server Query Console9.3 Critical
- keywordrush content egg – affiliate product importer & price comparisonContent Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion8.1 High
- fledge-iot fledgeFledge IoT Gateway Backup Restore Tar Path Traversal4.9 Medium
- koenkk zigbee2mqttZigbee2MQTT External JS Extension Path Traversal Leading to Remote Code Execution8.1 High
- openplc v3 v3, thiagoralves openplc v3 +1 moreOpenPLC Runtime v3 Path Traversal in Structured Text FILE Directive Leading to Arbitrary File Write9.9 Critical
- eclipse mojarraIn Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not...7.5 High
- eclipse theia, the eclipse foundation eclipse theia +1 moreIn Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes...7.5 High
- eclipse theia, the eclipse foundation eclipse theia +1 moreIn Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST...8.8 High
- eclipse theia, the eclipse foundation eclipse theia +1 moreIn Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend...7.5 High
- art-templateart-template - Path Traversal in Sub-Template Resolution via include()/extend()7.5 High
- the-pocket pocketflow (pocketflow-coding-agent cookbook example)PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools6.8 Medium
- unknown custom fieldsCustom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal10.0 Critical
- yeqifu warehouseyeqifu warehouse FileController.java path traversal5.3 Medium
- zombodroid meme generator appZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal4.8 Medium
- tryghost ghostGhost: Theme Upload Path Traversal6.6 Medium
- tryghost ghostGhost: Database Backup Path Traversal5.5 Medium
- Show moreLoading…