CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- david-crty databasementDavid-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal2.1 Low
- No product listedlangflow-ai langflow v1.8.4 is affected by: Directory Traversal. The impact is: Arbitrary file...7.5 High
- No product listedThe /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3...9.8 Critical
- No product listedThe knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is...9.1 Critical
- No product listedThe OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable...9.1 Critical
- No product listeddeeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live...9.8 Critical
- No product listedIn Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal...9.1 Critical
- No product listedIn Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal...7.5 High
- No product listedDevika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function,...8.8 High
- yonyou u8 crmYonyou U8 CRM Arbitrary File Read via getemaildata.php8.7 High
- inspur haiyue hcm cloudInspur HCM Cloud Arbitrary File Read via file/download Endpoint8.7 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Path Traversal7.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Path Traversal7.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Path Traversal7.4 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway remote code execution7.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core arbitrary file write7.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway path traversal7.2 High
- sqlalchemy makoMako: Path traversal via drive-letter URI on Windows in TemplateLookup6.5 Medium
- zeroclaw-labs zeroclawZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_path8.5 High
- red hat assisted installer for red hat openshift container platform 2, openshift container platform 4.13, openshift container platform 4.15 +2 more +4 moreOc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction7.3 High
- phuongwebo webo mcpWordPress WEBO MCP plugin <= 3.0.18 - Arbitrary File Deletion vulnerability6.8 Medium
- envato template kit – importWordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability6.8 Medium
- imagely nextgen galleryWordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability7.5 High
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Arbitrary File Read7.1 High
- productdesignerapp product designer appProduct Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design7.5 High
- gedelumbung hospitalmanagementgedelumbung HospitalManagement Endpoint data_galeri.php hapus path traversal5.1 Medium
- No product listedDB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app...9.1 Critical
- No product listedDB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app...9.1 Critical
- No product listedbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng...7.5 High
- No product listedbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file ...9.1 Critical
- No product listedagent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers...7.5 High
- No product listedagent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers...7.5 High
- No product listedmodelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file.8.1 High
- No product listedmodelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.8.1 High
- watchguard fireware, fireware os +1 moreFireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A7.1 High
- watchguard fireware, fireware os +1 moreFireware OS Improper Authorization in Access Portal Reverse Proxy5.3 Medium
- watchguard fireware, fireware os +1 moreFireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read8.2 High
- the wikimedia foundation mediawiki - easytimeline extensionEasyTimeline should not serve image maps as application/xml9.8 Critical
- videolan vlcVLC media player before 3.0.24 Path Traversal via skins28.5 High
- google osv-scalibrPath Traversal in VMDK Extractor in OSV-SCALIBR6.9 Medium
- hewlett packard enterprise (hpe) instant onAuthenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On3.0 Low
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities8.8 High
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.8.1 High
- google mcp toolbox for databasesPath Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases8.6 High
- rochacbruno marmiteMarmite through 0.4.2 Path Traversal via Development Server8.7 High
- balbooa forms, balbooa.com balbooa forms extension for joomla +1 moreJoomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.48.9 High
- balbooa forms, balbooa.com balbooa forms extension for joomla +1 moreJoomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.46.9 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.37.0 High
- nagios host, teamviewer full client +1 moreImproper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients7.8 High
- flowring technology corp agentflow 4.0Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）7.1 High
- Show moreLoading…