CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- progress sharefile storage zones controllerArbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService7.4 High
- otrs ag ((otrs)) community edition, otrs +1 morePath Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory8.7 High
- samsung mobile smart switchPath traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files...5.1 Medium
- samsung mobile flowPath traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access...5.1 Medium
- rapid7 metasploit frameworkMetasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution8.8 High
- westboy cicadascmswestboy CicadasCMS Template Management input TemplateController.input path traversal5.3 Medium
- westboy cicadascmswestboy CicadasCMS Backend Template Editor save TemplateController.save path traversal5.1 Medium
- bleenco abstrusebleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal6.9 Medium
- ph7software ph7builderpH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link7.2 High
- instantsoft icms2InstantSoft icms2 Image image.php files_delete_file path traversal5.3 Medium
- lippu docx reader office viewer appLippu Docx Reader Office Viewer App path traversal5.3 Medium
- ag2ai ag2ag2ai ag2 UserProxyAgent os.path.join path traversal5.3 Medium
- addsumtech slide-makerslide-maker through 5.8.0 Path Traversal via generate_images_openai.py4.8 Medium
- chimpstudio foodbakeryWordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability7.7 High
- presto player proWordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability6.8 Medium
- peepsoWordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability7.7 High
- cohere-ai cohere-pythonCohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction5.9 Medium
- rtcamp rtmedia for wordpress, buddypress and bbpressWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability9.8 Critical
- argoproj-labs argocd-mcpargocd-mcp through 0.9.0 Path Traversal via delete_application Tool5.3 Medium
- webilia listdom: ai-powered business directory with classifieds ads listingsListdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter4.9 Medium
- divi essential plusDivi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read via 'svg_image' Parameter7.5 High
- themeisle ppom – product addons & custom fields for woocommercePPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter9.1 Critical
- gpriday siteorigin widgets bundleSiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors LESS Variable)6.5 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import5.4 Medium
- wpazleen post export import with mediaPost Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.json4.9 Medium
- posit-dev py-shinyShiny for Python - Path traversal in bookmark restore6.9 Medium
- contaoContao: Path traversal in the images controller5.3 Medium
- pyloadpyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)9.4 Critical
- mynaparrot plugnmeet-serverplugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert7.1 High
- collabora kodexplorerKodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction7.2 High
- apache software foundation camel karavanApache Camel Karavan: project file name path traversal when committing a project to Git8.8 High
- unknown generate pdf using contact form 7WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability7.5 High
- add-ons.org pdf for contact form 7WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerability7.5 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an...6.3 Medium
- red hat build of podman desktop, certification program for red hat enterprise linux 9, edge manager 1 +8 more +10 moreGvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose9.3 Critical
- masci banksBanks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry7.3 High
- ibm guardium data protectionMultiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection9.8 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.8.1 High
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.8.1 High
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access7.5 High
- ibm guardium data protectionIBM Guardium Data Protection Path Traversal7.5 High
- datamodel-code-generatordatamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory7.5 High
- bower decompress-zip decompress-zipBower decompress-zip has a path traversal vulnerability7.8 High
- hashicorp shared libraryGo-getter vulnerable to a path traversal in S3/GCS directory download handling5.3 Medium
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.06.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreFlatpak-builder: local file exfiltration via `file6.1 Medium
- broadcom brocade active support connectivity gateway, brocade active support connectivity gateway +1 moreWhen Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised...7.7 High
- broadcom brocade active support connectivity gateway, brocade active support connectivity gateway +1 moreA path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions...8.6 High
- unknown backwpupBackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback6.6 Medium
- broadcom brocade sannav, brocade sannav +1 moreA path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav...6.9 Medium
- Show moreLoading…