CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- brocade fabric os, broadcom fabric operating system +1 moreAn arbitrary file and directory deletion vulnerability exists in the REST API management...5.7 Medium
- hashicorp vault enterpriseVault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution5.4 Medium
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots8.0 High
- @backstage plugin-techdocs-node, backstage +1 moreBackstage: Improper input validation in TechDocs Markdown extension configuration7.7 High
- @quasar app-vite, quasarframework quasar +1 moreQuasar Framework: App Vite SSG page output paths can escape the configured distribution directory5.7 Medium
- cisco jabber for androidCisco Jabber for Android Path Traversal via Shared Content URI5.1 Medium
- @backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 moreBackstage: Improper repository path validation in a Scaffolder backend module7.1 High
- @backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 moreBackstage: Improper input validation in Confluence to Markdown scaffolder module6.3 Medium
- sonicwall sma1000A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface...7.2 High
- visidataA path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of...6.5 Medium
- visidataA path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData ...5.5 Medium
- anthropic @anthropic-ai/claude-codeArbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code7.7 High
- veeam backup and replicationThis vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to...8.3 High
- openprinting cupsOpenPrinting CUPS: root-side banner file disclosure5.3 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +4 more +6 morePulp-rpm: distribution tree publish creates directories from .treeinfo ids5.0 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities8.1 High
- @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 moreBackstage: Potential file exposure through local TechDocs publisher5.3 Medium
- @backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 moreBackstage: Inconsistent enforcement of allowed location types during catalog processing3.1 Low
- @backstage backend-defaults, backstage, linuxfoundation backstage\/backend defaults +2 moreBackstage: Improper input validation in cloud storage URL readers4.4 Medium
- backstage, @backstage plugin-catalog-backend-module-aws, plugin-catalog-backend-module-azure +3 more +5 moreBackstage: Cloud storage catalog locations may cross configured storage boundaries3.0 Low
- @backstage plugin-proxy-backend, backstage, linuxfoundation backstage\/plugin-proxy-backend +2 moreBackstage: Improper input validation in proxy-backend6.4 Medium
- @backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 moreBackstage: Improper input validation in TechDocs static content requests6.5 Medium
- @backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 moreBackstage: Improper authorization enforcement for TechDocs static content6.5 Medium
- @backstage plugin-scaffolder-backend-module-bitbucket-cloud, plugin-scaffolder-backend-module-bitbucket-server, backstage +2 more +4 moreBackstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions8.5 High
- arista networks cloudvision portalSecurity Advisory 01898.6 High
- arista networks cloudvision portalSecurity Advisory 01898.6 High
- arista networks cloudvision portal, cloudvision sensor +1 moreSecurity Advisory 01887.2 High
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass7.3 High
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager9.8 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager8.8 High
- dell system updateDell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a...9.6 Critical
- dell system updateDell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a...7.3 High
- @quasar app-vite, quasarframework quasar +1 moreQuasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories4.1 Medium
- @quasar icongenie, quasarframework quasar +1 moreQuasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile7.1 High
- payloadcms payloadPayload: Incomplete validation during the upload file lifecycle8.1 High
- microsoft kiota, microsoft.openapi.kiota, microsoft.openapi.kiota.builder +2 moreKiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests3.1 Low
- microsoft lrzszlrzsz before 0.13.0 Path Traversal via lrz Restricted Mode checkpath()7.7 High
- rundeckRundeck before 6.2.0 Arbitrary File Read via File Resource Model Source7.1 High
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability8.6 High
- about piotnet piotnet addons for elementorWordPress Piotnet Addons For Elementor plugin <= 7.1.71 - Arbitrary File Download vulnerability6.5 Medium
- blueglass interactive ag jobs for wordpressWordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerability7.7 High
- No product listedkkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController...7.5 High
- doclingDocling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend6.9 Medium
- docling, docling-project docling-slim +1 moreDocling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine7.5 High
- newell brands dymo idNewell Brands DYMO ID parent directory open to path traversal through improper spheres of control7.0 High
- cookpete auto-changelogauto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF8.4 High
- grafana mcp-k6Arbitrary file read via the convert_playwright_script prompt in mcp-k66.5 Medium
- the document foundation libreofficeArbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality6.8 Medium
- Show moreLoading…