CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- apache karafApache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation9.8 Critical
- No product listedmark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper...5.9 Medium
- amir20 dozzleDozzle before 11.1.2 Path Traversal via Log ZIP Download4.6 Medium
- zoneminderZoneMinder 1.37.x Path Traversal via files view7.1 High
- eleveo quality managementEleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal5.3 Medium
- deepseek deepseek-harnessDeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal2.3 Low
- sangoma freepbx, freepbx security-reporting +1 moreAuthenticated Remote Code Execution via Path Traversal in FreePBX Backup Module8.6 High
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module8.7 High
- kevva decompress@xhmikosr/decompress: Path traversal via symlink chain9.1 Critical
- No product listedPMWeb downloader.aspx path traversal6.9 Medium
- tencent ai-infra-guardTencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal2.4 Low
- innotim software, telecommunications and consultancy trade ltd. co. logsign siemPath Traversal in Innotim Software's Logsign SIEM7.1 High
- canonical lxdPath traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root9.6 Critical
- canonical lxdPath traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD9.9 Critical
- canonical lxdCLI Path Traversal via Content-Disposition in LXD Image Export/Copy4.2 Medium
- abb protection and control ied manager (pcm600)Path Traversal During Project Archive Import5.6 Medium
- No product listeddbgate Files Endpoint runners.js files path traversal6.9 Medium
- dayforce ess excelityPath Traversal in Dayforce ESS Excelity9.2 Critical
- No product listeddbgate Export databaseConnections.js exportModelSql path traversal6.9 Medium
- No product listeddbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal6.9 Medium
- No product listeddbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal6.9 Medium
- No product listeddbgate Archive Link Creation archive.js createLink path traversal6.9 Medium
- kubernetesKubernetes kubectl cp path traversal on Windows allows arbitrary file writes6.5 Medium
- flb-music flb-music-playerFLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal4.8 Medium
- bimser solution software trade inc. eba plus document and workflow management systemPath Traversal in Bimser Solution Software's eBA Plus6.5 Medium
- wiresharkImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark5.5 Medium
- pnpmpacquet before 12.0.0-alpha.5 Path Traversal via lockfile alias7.1 High
- svenbluege event gallery, svenbluege.de event gallery for joomla +1 moreJoomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.07.0 High
- unknown webfacing™WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated LFI via assets/index.php5.3 Medium
- lomart up, lomart.fr up plugin for joomla +1 moreJoomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.299.2 Critical
- lomart up, lomart.fr up plugin for joomla +1 moreJoomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.2910.0 Critical
- kyvernoKyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path8.3 High
- gitpython-developers gitpythonGitPython before 3.1.62 Path Traversal via gitmodules path8.7 High
- budibase serverBudibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink8.7 High
- siyuan-note siyuanSiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder8.3 High
- openclawOpenClaw before 2026.8.1 Path Traversal via QQBot voice filenames5.3 Medium
- openclawOpenClaw before 2026.8.1 Path Traversal via Structured Attachments7.1 High
- openclawOpenClaw before 2026.8.1 Path Traversal via Unicode Fallback6.0 Medium
- crivion laranodeLaranode before 1.2.1 Path Traversal in File Manager Upload Endpoint8.7 High
khojPyPIkhoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem8.7 High- macwarrior clipbucket-v5ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php8.6 High
- glpi-project glpiGLPI: RCE via Form import9.4 Critical
- glpi-project glpiGLPI: arbitrary file deletion8.5 High
- zammadZammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset5.3 Medium
- zammadZammad: Arbitrary File Deletion via Unvalidated Session Identifier in Long Polling Controller8.8 High
- invoiceplaneInvoicePlane: Missing CSRF Protection on State-Changing delete Actions7.5 High
- invoiceplaneInvoicePlane permits local file inclusion through the e-invoice XML configuration identifier7.5 High
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.7.5 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request9.8 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.7.5 High
- Show moreLoading…