CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- totolink a3002muTotolink A3002MU File Upload formUploadFile sub_44B250 path traversal5.3 Medium
- mitel mivoice office 400Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution8.5 High
- legcordLegcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers9.2 Critical
- gerapyGerapy Project Management views.py project_create path traversal5.3 Medium
- No product listedFeehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article...6.5 Medium
- No product listedApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint...7.2 High
- No product listedWookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export...7.5 High
- No product listedUnimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an...7.5 High
- rainygao docsysRainyGao DocSys Document Controller doGetTmpFile.do DocController.doGetTmp path traversal5.3 Medium
- unspecified drogonDrogon Static File Router StaticFileRouter.cc route path traversal6.9 Medium
- laradashboardLaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint6.3 Medium
- linux mint xreaderLinux Mint Xreader PDF Attachment Saving ev-window.c g_file_get_child path traversal5.3 Medium
- linux mint xreaderLinux Mint Xreader EPUB File epub-document.c g_strdup_printf path traversal5.3 Medium
- e4j s.r.l. vikappointments services booking calendarVikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter9.1 Critical
- timwhitlock loco translateLoco Translate < 2.8.9 - Translator+ Limited File Read via 'path' Parameter6.8 Medium
- unitecms unlimited elements for elementorUnlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal6.6 Medium
- themeisle mpgMPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import6.8 Medium
- getformwork formworkFormwork before 2.3.13 Path Traversal via BackupController Download and Delete7.1 High
- hkuds vibe-tradingHKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path8.7 High
- angular angular-cliAngular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows6.3 Medium
- jelmer dulwichDulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths8.7 High
- jelmer dulwichDulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter7.3 High
- jelmer dulwichDulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks7.3 High
- damjan codeart google mp3 audio playerCodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.php8.7 High
- nrwl nxNx: Path traversal in nx migrate package-migrations extraction5.8 Medium
- demsking image-downloaderImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader9.1 Critical
- astral-sh uvuv: Path traversal on Windows through wheel extraction5.9 Medium
- qos.ch sarl logback-classicLogback: Incomplete protection against CVE-2026-198806.3 Medium
- tryghost ghostGhost: Remote Code Execution via Theme Translation Files7.2 High
- tryghost ghostGhost from 6.10.3 before 6.64.0 RCE via Theme Translation Files8.6 High
- tryghost ghostGhost: Path Traversal via Locale Setting4.9 Medium
- tryghost ghostGhost 1.20.0 before 6.64.0 Path Traversal via Locale Setting6.9 Medium
- No product listedIn TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal...8.1 High
- No product listedIn TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path...9.1 Critical
- gongrzhe office-powerpoint-mcp-serverOffice-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image7.6 High
- teledyne flir aware2Local File Inclusion in Teledyne FLIR Robots running Aware210.0 Critical
- getsimplecms-ceGetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" field7.1 High
- fortinet fortimailAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...9.8 Critical
- givanz vvvebVvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup tools7.2 High
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 moreKeycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read6.5 Medium
- codexonics prime moverPrime Mover < 2.2.1 Path Traversal via wprime-config.json7.0 High
- codexonics prime moverPrime Mover < 2.2.1 Zip Slip Path Traversal File Write8.6 High
- foundation50 classroom50Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)9.4 Critical
- acymailing newsletter team smtp newsletterWordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability8.6 High
- red hat ansible automation platform 2Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory5.9 Medium
- n8n-io n8nn8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node8.1 High
- n8n-io n8nn8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation7.0 High
- fujifilm business innovation corp. apeos 3060 / 2560 / 1860 japan model, apeos 3061 / 2561 / 2061 japan model, apeos 3560 / 3060 / 2560 asia pacific model +66 more +68 moreA path traversal vulnerability exists in the web management interface of multiple Multifunction...6.8 Medium
- wago 0750-811x-xxxx-xxxx, 0750-821x-xxx-xxx, 0751-9x01 +8 more +10 morePath traversal in dynamically created BACnet File Objects9.3 Critical
- genians, inc genian nac 4.0.175 release, genian nac 5.0.65 lts release, genian nac 5.0.75 lts release +6 more +8 moreGenians, Inc Genian NAC/ZTNA Remote Code Execution5.9 Medium
- Show moreLoading…