CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- mcp-atlassian mcp atlassian, sooperset mcp-atlassian +1 moreMCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()7.7 High
- lantronix emg7500, emg8500, slb882 +4 more +6 moreLantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass9.4 Critical
- lantronix emg7500, emg8500, slb882 +4 more +6 moreLantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation10.0 Critical
- vectordotdev vectorVector: Arbitrary file write in the file sink via templated path (path traversal).9.3 Critical
- mispMISP Path Traversal via Organization Name in Org-Statistics Logo Check5.1 Medium
- mispMISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name5.3 Medium
- mispMISP Information Disclosure via Forged Upload Path5.3 Medium
- mispMISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials6.9 Medium
- check point multiple products, checkpoint multi-domain security management, quantum security management +2 moreDirectory Traversal and File upload allows execution of arbitrary script on the Management Server9.8 Critical
- dgtlmoon changedetection.iodgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal5.3 Medium
- dgtlmoon changedetection.iodgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal6.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Admin path-traversal write via trace name2.1 Low
- wahid0003 product feed manager for woocommerce – ctx feed – support 220+ shopping, ai & social channelsProduct Feed Manager for WooCommerce <= 6.6.43 - Authenticated (Shop Manager+) Path Traversal to File Deletion via 'provider' Parameter4.9 Medium
- seatheme bm content builderBM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Read6.5 Medium
- seatheme bm content builderBM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletion8.8 High
libdancer2-perlDebian,perl-Dancer2openSUSE +1 moreDancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler7.5 High- No product listedMissing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to...9.1 Critical
- No product listedAn out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact...7.5 High
- roomi-fields notebooklm-mcp@roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory7.1 High
- laurent22 joplinJoplin: Path traversal in transcribe proxy endpoint via URL-encoded slash4.3 Medium
- laurent22 joplinJoplin: Path traversal in resource sync — silent arbitrary file write outside the resource directory7.0 High
- tautulliTautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_database7.0 High
- kubeedgeKubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join8.1 High
- jgraph drawiodraw.io: Path traversal in ExportProxyServlet allows access to arbitrary backend endpoints3.7 Low
- condaConda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation8.8 High
- red hat openshift container platform 4, openshift container platform 5 +1 moreCri-o: cri-o: insufficient validation during container checkpoint restore8.0 High
- nvm-sh nvmnvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias6.7 Medium
web2pyUbuntuweb2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory...6.5 Medium- 06ketan slideshot06ketan slideshot renderer.ts render_slides path traversal5.3 Medium
- 0215andrewfeng ace-mcp0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal5.3 Medium
- 03-lovepreetsingh mcp03-lovepreetSingh MCP route.ts create_file path traversal6.9 Medium
- 00kisumi00 mcp-file-analyzer00Kisumi00 mcp-file-analyzer analyze_csv_data MCP tool main.py ControlFlowNode path traversal5.3 Medium
- gopeedlab gopeedGopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal7.0 High
- webkul qloappsQloApps through 1.7.0 Arbitrary File Read via getEmailHTML7.1 High
- rclonerclone before 1.75.1 Path Traversal via Directory Listing Names2.3 Low
- openedx openedx-platformOpen edX Platform: Path traversal via prefix-bypass in safe_extractall Path Validation4.3 Medium
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.7.2 High
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.7.6 High
- caucho technology, inc. resinCaucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet8.7 High
- hargata lubelogLubeLogger: Path Traversal in HandleTranslationFileUpload Allows Authenticated Users to Write Files Outside Data Directory8.1 High
- ibm cloud pak for dataIBM Cloud Pak for Data is vulnerable to path traversal7.5 High
- hcl software appscan 360°A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).6.3 Medium
- synology diskstation manager (dsm)An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...6.5 Medium
- synology diskstation manager (dsm)An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...4.3 Medium
- jkohlbach store exporter – export woocommerce products, orders, subscriptions, customersStore Exporter <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion via 'filename' Parameter4.9 Medium
- printcart store – web to print product designer for woocommercePrintcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parameters7.5 High
- microsoft azure logic appsAzure Logic Apps Elevation of Privilege Vulnerability10.0 Critical
- microsoft azure arcAzure Arc Elevation of Privilege Vulnerability9.3 Critical
- vmdeshpande ai-agent-automationAI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory8.1 High
- labredescefetrj wegiaWeGIA: Unauthenticated Auth Bypass + Local File Inclusion9.1 Critical
- Show moreLoading…