CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- asadkn debloat – remove unused css, optimize jsDebloat <= 1.3.0 - Unauthenticated Arbitrary File Read via 's' Search Parameter via @import url() in Reflected Search-Feed <link>5.9 Medium
- red hat enterprise linux 8, enterprise linux 9, fuse 7 +4 more +6 moreOrg.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role7.1 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Remote Code Execution Vulnerability8.8 High
- energizelab fastapi ai inference serverEnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write9.1 Critical
- lycheeorg lycheeLychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read8.9 High
- red hat fuse 7, jboss enterprise application platform 7, jboss enterprise application platform 8.1 +2 more +4 moreWildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name8.8 High
- opnsense coreOPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files5.9 Medium
- opnsense coreOPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer9.9 Critical
- espocrmEspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete5.5 Medium
- totalavCVE-2026-1107467.8 High
- peazipPath traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name8.4 High
- qnap systems inc. qsirchUnauthenticated remote code execution vulnerability9.3 Critical
- qnap video stationRemote Code Execution in upload.php of Video Station8.7 High
- qnap systems inc. qsync centralArbitrary Folder Deletion in Qsync Central 5.0.0.57.2 High
- qnap systems inc. qcalagentPath Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint8.7 High
- qnap systems inc. qsync centralPath Traversal Vulnerability in Qsync Central's qsyncsrv.cgi5.3 Medium
- qnap video stationRemote code execution via command injection7.7 High
- qnap video stationArbitrary file deletion and remote code execution7.7 High
- No product listedDirectory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to...6.5 Medium
- gitpython-developers gitpythonGitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()6.9 Medium
- error311 fileriseFileRise: Authenticated path traversal escapes configured storage root through inherited ACLs6.5 Medium
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Path Traversal Vulnerabilities4.3 Medium
- error311 fileriseFileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root5.4 Medium
- colanodeColanode Server through 0.4.7 Path Traversal via Avatar Download Route5.3 Medium
- cemtan sar2htmlcemtan sar2html File Upload sar2html.py updateDb path traversal6.9 Medium
- dbt-labs dbt-coredbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`8.2 High
- ludwig-ai ludwigLudwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink members8.1 High
- nasa fprimeF´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath7.1 High
- meetecho janus-gatewayJanus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename6.9 Medium
- khronos group nnef, nnef-tools +1 moreKhronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label4.8 Medium
- giteaGitea Org-mode file disclosure and code execution9.8 Critical
- dell unisphere for powermax vappDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a...6.5 Medium
- busyboxBusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability6.1 Medium
- unknown ultimate multisiteUltimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' Parameter8.6 High
- ubiquiti inc unifi protect ai keyA malicious actor with access to the network and under certain conditions could exploit a Path...3.7 Low
- ubiquiti inc unifi protect ai keyA malicious actor with access to the network and under certain conditions could exploit a Path...3.7 Low
- citrix uniconosArbitrary file read and write5.1 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)5.5 Medium
- adobe coldfusion 2023, coldfusion 2025 +1 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)9.3 Critical
- ibm websphere application server - libertyIBM WebSphere Application Server Liberty Path Traversal5.5 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter8.7 High
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.7 High
- microsoft dynamics nav 2018Dynamics Business Central Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWebDAV Elevation of Privilege Vulnerability8.8 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Projected File System Information Disclosure Vulnerability5.5 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Information Disclosure Vulnerability6.5 Medium
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 9.0 runtime +2 more +4 more.NET Elevation of Privilege Vulnerability7.3 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows libarchive Tampering Vulnerability6.5 Medium
- Show moreLoading…