CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- jknack handlebars.javaHandlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass7.5 High
- estonian information system authority (ria) digidoc4Arbitrary file overwrite vulnerability in DigiDoc4 client8.4 High
- atutorPath Traversal in ATutor6.9 Medium
- atutorPath Traversal leading to Remote Code Execution in ATutor8.7 High
- atutorPath Traversal in ATutor2.3 Low
- n8nn8n before 2.34.1 Remote Code Execution via Path Traversal8.7 High
- agnoAgno PythonTools Path Traversal via joinpath file_name argument8.5 High
- splunk soarPath Traversal through Automation Broker in Splunk SOAR2.7 Low
- splunk soarPath Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR6.5 Medium
- splunk soarPath Traversal through App Installation Tar Extraction in Splunk SOAR6.5 Medium
- splunk soarRemote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR7.6 High
- splunk, splunk enterprise +1 morePath Traversal through Splunk Web Static File Serving in Splunk Enterprise5.3 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system l1022 \(9786-22h\) firmware +6 more +8 moreIBM OpenBMC Code Execution6.8 Medium
- yangzongzhuan ruoyi-vueyangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal5.3 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS3.7 Low
- logto-io logtologto-tunnel serves files outside --experience-path via path traversal8.7 High
claude-faf-mcpnpmclaude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools7.5 Highfaf-mcpnpmfaf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools7.5 Highgrok-faf-mcpnpmgrok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools7.5 High- orval-labs orvalOrval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref7.1 High
- wazuhWazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager9.1 Critical
- wazuhWazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()7.5 High
- python software foundation cpythontarfile extraction filter bypass allows creation of directories outside the destination6.3 Medium
- open-emr openemrOpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore5.3 Medium
- sgoudelis ground-stationGround Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution9.8 Critical
- sgoudelis ground-stationGround Station: Unauthenticated out-of-containment file read via `sigmfplayback` `recordingPath`5.3 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a...6.5 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key10.0 Critical
- mitchell bennis simple file listSimple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal8.6 High
- wpfeedback atarim – ai agency for wordpress: edit pages, fix code, update plugins, seo & client feedbackAtarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta8.1 High
- rargames 4gaboards4gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Board Export8.8 High
- truelockmc streambertStreambert: Arbitrary Directory Creation and File Manipulation via Backup Handler8.4 High
- truelockmc streambertStreambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol8.8 High
- confidential-containers guest-componentsConfidential Containers Guest Components image-rs: zip-slip-class arbitrary file write via absolute entry path in hardlink fallback6.4 Medium
- linuxfabrik lib, monitoring-plugins +1 morelinuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)5.5 Medium
- linuxfabrik monitoring-pluginsLinuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)5.5 Medium
- ha-china blueprint-studioBlueprint Studio terminal command working directory not bounded to config directory5.1 Medium
- mineadminMineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall8.7 High
- moby go-archive, docker cli, compose +3 more +5 moreTar extraction in moby/go-archive can write outside the destination directory via link following7.1 High
- nvidia triton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause...9.8 Critical
- mobsf mobile-security-framework-mobsfMobSF: Arbitrary File Read via Path Traversal in ZIP Uploads5.5 Medium
- wazuh, wazuh wazuh-manager +1 moreWazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello7.0 High
- wazuh, wazuh wazuh-manager +1 moreWazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment7.0 High
@rhinostone/swignpm,@rhinostone/swig-corenpm,@rhinostone/swig-djangonpm +2 more +4 more@rhinostone/swig: arbitrary local file read via include/extends path traversal7.5 High- hmbown codewhaleCodeWhale before 0.8.64 Path Traversal via image_analyze symlink8.7 High
- hmbown codewhaleCodeWhale before 0.8.64 Arbitrary File Read via instructions8.7 High
- aquasecurity trivyTrivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write6.8 Medium
- webappick ctx feedWordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability4.9 Medium
- themecomplete extra product options & add-ons for woocommerceWordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability7.5 High
- Show moreLoading…