CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedThe C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal...7.5 High
- devspaceDevSpace through 6.3.21 Path Traversal via tar extraction8.7 High
- apple ipados, macos, visionos +2 more +4 moreA path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and...5.5 Medium
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS Golden...7.8 High
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....5.5 Medium
- apple macosA path traversal issue was addressed with improved path validation. This issue is fixed in macOS...7.8 High
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....5.5 Medium
- apple macosA validation issue was addressed with improved input sanitization. This issue is fixed in macOS...6.5 Medium
- apple ipados, watchos, ios and ipados +1 more +3 moreA path traversal issue was addressed with improved input validation. This issue is fixed in iOS...5.5 Medium
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS Golden...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreA path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26...7.5 High
- apple macosAn input validation issue was addressed with improved input validation. This issue is fixed in...5.5 Medium
- apple ipados, visionos, ios and ipados +1 more +3 moreA path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and...5.5 Medium
- apple macosA permissions issue was addressed with improved path validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreA permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7...5.5 Medium
- ibm db2IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths7.5 High
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.1 High
- artifex software inc. *pymupdf* pymupdfPyMuPDF 1.28.2 Path Traversal via extract_objects() Font Branch7.1 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.4.3 Medium
- mikrotik routerosMikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction6.9 Medium
- apache software foundation storm nimbusApache Storm Nimbus: Path Traversal as the Supervisor User via Unsanitised Blobstore Map Local Name7.8 High
- apache software foundation storm clientApache Storm Client: Cross-Tenant Dependency Jar Substitution via Predictable Blob Keys8.8 High
- apache software foundation storm nimbusApache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location6.5 Medium
- eclipse foundation embedded cdt (c/c++ development tools)In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised...9.1 Critical
- joomshaper.com sp page builder (free and pro) extension for joomlaJoomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.06.9 Medium
- joomshaper.com sp page builder (free and pro) extension for joomlaJoomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.07.0 High
- 0x4m4 hexstrike ai0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal6.9 Medium
- orhun rustypasterustypaste before 0.18.1 Path Traversal via filename header8.7 High
- restify node-restifyrestify node-restify static.js serveStatic path traversal6.9 Medium
- gitlab, gitlab community edition and enterprise edition +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab10.0 Critical
- cisa malcolmPath Traversal in Malcolm7.1 High
- signalwire libkslibks has path traversal in kws HTTP parser via URI segment overflow7.5 High
- python software foundation cpythontarfile hardlink fallback ignores custom extraction filter rejection via None5.7 Medium
- mistralai mistral-vibeAn arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an...9.3 Critical
- mistralai mistral-vibeAn arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an...9.2 Critical
- appleple inc. a-blog cmsa-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an...6.9 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion8.1 High
- No product listedLinkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to...4.9 Medium
- acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpressAcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter7.5 High
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software9.1 Critical
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.5 High
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8 High
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8 High
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software9.6 Critical
- ibm langflow oss, langflow +1 moreA path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem8.8 High
- ibm db2IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system4.3 Medium
- tp-link systems inc. archer mr600, tl-mr6400 v8 +1 moreAuthenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR6004.8 Medium
- rclonerclone: source object names can escape the configured root on upload5.3 Medium
- rclonerclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace6.3 Medium
- Show moreLoading…