CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- apostrophecms apostrophe, uploadfs +1 moreApostropheCMS: Path traversal in uploadfs3.3 Low
- No product listedaaPanel Download Endpoint v2.py send_file path traversal5.3 Medium
- flexgetFlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin9.2 Critical
- @vitest mocker, vitest-dev vitest +1 moreVitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix5.9 Medium
- vitejs vite, vite-plus +1 moreVite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`6.3 Medium
- vitejs vite, vite-plus +1 moreVite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine6.3 Medium
- draytek vigor2960DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal5.3 Medium
- draytek vigor2960DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal5.3 Medium
- draytek vigor2960DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal5.3 Medium
- utoxuTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers7.7 High
- advantech adam-3600A vulnerability could allow an authenticated attacker to write files to arbitrary locations on...8.2 High
- advantech adam-3600A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on...8.2 High
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS Golden...5.5 Medium
- h3c magic nx15H3C Magic NX15 upload importprofile path traversal5.1 Medium
- mlflowMLflow < 3.18.0 Path Traversal via Trace ID API8.8 High
- kiwilan php-archivekiwilan php-archive Extraction ArchiveZip.php extract path traversal5.3 Medium
- grandnode grandnode2grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal5.1 Medium
- ticktick limited for androidTickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity6.9 Medium
graphifyyPyPIGraphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo6.8 Medium- ibm mq advanced container images, mq operator, supplied mq advanced container images +2 moreIBM MQ Path Traversal2.7 Low
- fossbillingFOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_exists6.9 Medium
- mopidyMopidy before 4.0.5 Path Traversal via File Backend library.lookup6.9 Medium
- purocean yank noteYank Note before 3.93.1 Path Traversal via /api/help Endpoint8.2 High
- diem-project diemdiem-project diem dmCodeEditor actions.class.php join path traversal5.1 Medium
- apache camelApache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing ent…7.4 High
- apache software foundation camelApache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry conta…7.4 High
- apache software foundation camelApache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry…7.4 High
- apache camelApache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry conta…7.4 High
- apache software foundation camelApache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure5.9 Medium
- apache software foundation kylinApache Kylin: delete metadata backup path-confinement bypass7.3 High
- pt norther lights production mapsvgWordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability7.7 High
- xorbits inferenceXinference through 4.0.1 Path Traversal via model_name in Custom Model Registration8.3 High
- vita3kVita3K before build 4187 Path Traversal via VPK Package Installation6.7 Medium
- omnigent-ai omnigentOmnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd7.7 High
- clidey whodbWhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor9.2 Critical
- boldgrid weforms – easy drag & drop contact form builder for wordpressweForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter5.4 Medium
- unknown contact form 7 signature addonContact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments5.9 Medium
- wpazleen post export import with mediaPost Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter4.9 Medium
- tektronix 3 series mdoAn issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal...7.5 High
- tektronix 3 series mdoAn issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal...8.1 High
- queueforge clickmigrateClickMigrate has Path Traversal in "revision -m" argument3.3 Low
- helicalinsightHelical Insight through 7.0.0 Path Traversal via /getExternalResource5.3 Medium
- coaidev coaiCoAI through 4.0.0 Unauthenticated Path Traversal via Archive Download Endpoints6.9 Medium
- countly countly-servercountly-server: Unauthenticated Path Traversal via Public Image and Screenshot Routes Leads to Read Internal Files7.5 High
- countly countly-servercountly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletion8.1 High
- thermo fisher torrent suite softwareThermo Fisher Torrent Suite Software Path Traversal7.1 High
- ikus-soft rdiffwebImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb4.6 Medium
- 10web booster – website speed optimization, cache & page speed optimizer10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path7.5 High
- tainacanTainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter6.5 Medium
- trainingbusinesspros groundhogg — crm, newsletters, and marketing automationGroundhogg <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion via CSV Import 'copy_file' Field Mapping8.1 High
- Show moreLoading…