CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- knowns-dev knownsknowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint6.9 Medium
- knowns-dev knownsknowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption8.7 High
- knowns-dev knownsknowns through 0.33.0 Path Traversal via code.find MCP tool7.1 High
- knowns-dev knownsknowns through 0.33.0 Path Traversal via Template Engine8.6 High
- maarten b advanced product fields extended for woocommerceWordPress Advanced Product Fields Extended for WooCommerce plugin <= 3.1.6 - Arbitrary File Deletion vulnerability8.6 High
- youzifyWordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability6.5 Medium
- proma-ai promaproma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal2.4 Low
- icecoderICEcoder through 8.1 Path Traversal via oldFileName Parameter8.7 High
- icecoderICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement8.7 High
- gis informatics gislab laboratory management systemLFI in GIS Informatics' GisLab Laboratory Management System7.5 High
- joomshaper.com sp property extension for joomlaJoomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.46.9 Medium
- kamalyon direct download for woocommerceDirect Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segment7.5 High
- cssimmon wp backitup community editionWP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter4.9 Medium
- No product listedPath Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor...7.5 High
- naorsabag openhopOpenHop: Path Traversal in Flow ID File Operations8.3 High
- pandora-analysis pandoraPath traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis9.3 Critical
- wangyihang githackerGitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git server5.3 Medium
github.com/lf-edge/ekuiperGo,github.com/lf-edge/ekuiper/v2Go,govulncheck-vulndbopenSUSE +2 moreLF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint5.5 Medium- knowns-dev knownsknowns before 0.30.0 Path Traversal via Document API8.8 High
- chainlitChainlit through 2.12.0 Path Traversal via socket.io sessionId8.8 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters4.9 Medium
- tanium complyTanium addressed a path traversal vulnerability in Comply.8.5 High
- tanium complyTanium addressed a path traversal vulnerability in Comply.8.5 High
- tanium data serviceTanium addressed a path traversal vulnerability in Tanium Data Service.6.6 Medium
- opnsense corentp: write path traversal9.0 Critical
@typespec/compilernpm,@typespec/openapi3npm +1 moreOpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree7.1 High- n8nn8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers6.3 Medium
- n8nn8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read5.3 Medium
- okta access gatewayImproper Path Validation in Okta Access Gateway Backup and Restore Functionality4.9 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.6 High
- adobe photoshop mobile, photoshop android +1 morePhotoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)5.0 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 morePowerShell Elevation of Privilege Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Compressed Folder Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Tampering Vulnerability6.5 Medium
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability7.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft PowerShell Security Feature Bypass Vulnerability6.5 Medium
- xenforoXenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows8.6 High
- commvault, commvault cloud +1 moreCommServe Path Traversal8.3 High
- commvault, commvault cloud +1 moreDataCube Security Feature Bypass8.5 High
- red hat enterprise linux 8, enterprise linux 9 +1 moreGnome-tweaks: path traversal in theme installer6.8 Medium
- knowns-dev knownsknowns before 0.30.0 Path Traversal via Import Name8.8 High
- knowns-dev knownsknowns before 0.30.0 Path Traversal via code.replace MCP action7.2 High
- knowns-dev knownsknowns before 0.30.0 Path Traversal via templateFile parameter8.7 High
- knowns-dev knownsknowns before 0.30.0 Path Traversal via MCP doc and memory tools8.7 High
- next4biz information technologies inc. csm (customer service management)Path Traversal in Next4Biz's CSM (Customer Service Management)7.5 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.4 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...6.5 Medium
- jupyter nbviewernbviewer through 1.0.1 Path Traversal via LocalFileHandler8.2 High
- mikrotik routerosUnauthenticated file read in Mikrotik RouterOS8.7 High
- Show moreLoading…