CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- dataeaseDataEase has a Path Traversal Vulnerability8.7 High
- akin software computer import export industry and trade ltd. akinsoft wolvox9 erp / kontrolpanel.exePath Traversal in AKIN Software's Wolvox9 ERP7.5 High
- arcadedata arcadedbArcadeDB before 26.8.1 Path Traversal via create/drop database8.4 High
- arcadedata arcadedbArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV8.3 High
- getgrav gravGrav before 2.0.15 Path Traversal via plugin-asset-map.php8.2 High
- No product listedAn arbitrary file write/directory traversal vulnerability in reportico-web <= 8.1.0 allows remote...9.1 Critical
- No product listedA directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to expose...6.5 Medium
- jumpserverJumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset5.4 Medium
- open-emr openemrOpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php7.0 High
- swe-agentSWE-agent Trajectory Inspector Path Traversal File Disclosure8.7 High
- evidentlyai evidentlyEvidently UI Path Traversal via Dataset Materialization Filename8.7 High
- hugging face transformersHugging Face Transformers Path Traversal via Checkpoint Index6.8 Medium
- hashicorp packerPacker vulnerable to arbitrary file write via crafted plugin archive during installation7.1 High
- notepad-plus-plusNotepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction8.1 High
- notepad-plus-plusNotepad++: session.xml backupFilePath starts_with Bypass5.1 Medium
- apostrophecms apostropheApostropheCMS: Arbitrary file read via import-export attachment-name path traversal6.5 Medium
ep_etherpad-litenpmEtherpad addressed weak token RNG, login timing, plugin path handling, API request handlingNo score- cliuniget: Path Traversal in Hook Files - Directory Escape Vulnerability8.4 High
- gruntwork-io terragruntTerragrunt: Arbitrary File Deletion via Malicious Module Manifest6.9 Medium
- progress sharefile storage zones controllerPath traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller7.2 High
- progress sharefile storage zones controllerArbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution7.2 High
- max-mapper extract-zipextract-zip arbitrary file write outside the destination directory via a symlink at the final path component8.1 High
- siyuan-note siyuanSiYuan kernel Path Traversal via database_clean MCP tool9.3 Critical
- No product listedDirectory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain...7.5 High
- No product listedDirectory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote...7.5 High
- No product listedMahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under...9.1 Critical
- themeum kirki – freeform page builder, website builder & customizerKirki <= 6.1.1 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'data' Parameter4.9 Medium
- unknown wpvivid — backup, migration & stagingWPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect9.1 Critical
- kodezen storeengine — complete ecommerce solution with memberships, licensing, affiliates & moreStoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL6.5 Medium
- prosolution wp clientProSolution WP Client <= 2.0.8 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters9.1 Critical
- pandora-analysis pandoraPath Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora10.0 Critical
- jackdewey link libraryLink Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter9.1 Critical
- pietror91 rapisafe – secure multi file upload for contact form 7RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Deletion via 'rsmfcf7_session' and 'file_name' Parameters9.1 Critical
- ooples token-optimizer-mcpToken Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints5.3 Medium
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities7.5 High
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities5.4 Medium
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities9.3 Critical
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities6.5 Medium
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities8.2 High
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities7.5 High
- kunbus revpipyloadImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad6.9 Medium
- kunbus revpipyloadImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad6.8 Medium
- qos.ch sarl logback-classicIncomplete protection against CVE-2025-112266.3 Medium
- 648540858 wvp-gb28181-pro648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversal5.3 Medium
- 648540858 wvp-gb28181-pro648540858 wvp-GB28181-pro Snapshot Endpoint PlayController.java path traversal5.3 Medium
- alldatacenter alldataalldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversal6.9 Medium
- getgrav gravGrav 2.0.11 Path Traversal via Backup Profile Configuration6.9 Medium
- dtstack taierDTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal5.1 Medium
- dtstack taierDTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal6.9 Medium
- dtstack taierDTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal5.1 Medium
- Show moreLoading…