CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- krajowa izba rozliczeniowa szafirPath Traversal in Szafir2.3 Low
- stylemix masterstudy lms wordpress pluginMasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax5.3 Medium
- stylemix masterstudy lms wordpress pluginMasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter5.3 Medium
- bmc it service management suitePath Traversal in BMC ITSM6.9 Medium
- unknown automated import products to cartAutomated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal9.9 Critical
- No product listedOpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the...9.8 Critical
- No product listedDB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src...9.1 Critical
- No product listedmodelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python...7.5 High
- No product listedInsecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers...9.1 Critical
- domoticzDomoticz: Missing authorization and path traversal in the udevices Lua parser handler5.4 Medium
- mattermostPath traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post8.0 High
- gopasspw gopassgopass before 1.17.0 Path Traversal via fs Storage Prune and IsDir6.7 Medium
- langchain-ai langgraph, langgraph-sdk +1 moreLangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests4.3 Medium
- labstack echoEcho static file middleware route protection bypass via encoded dot-dot traversal5.9 Medium
mcp-sanitizernpmmcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths7.5 High- fearlessgeekmedia fearlesscmsFearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS9.4 Critical
- siyuan-note siyuanSiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias5.9 Medium
- ultralyticsUltralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability8.8 High
- jenkins project jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting...4.3 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by...8.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management8.8 High
- wing ftp server ftp serverPath Traversal in Wing WFTP Server leading to Remote Code Execution9.4 Critical
- progress telerik document processing librariesPath Traversal in Telerik Document Processing Libraries AI Agent Tools7.1 High
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release...6.8 Medium
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release...5.3 Medium
- havelsan liman mysAuthenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS6.5 Medium
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release...8.8 High
- tainacanTainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment4.9 Medium
- king-theme product designer for woocommerce wordpress | lumiseProduct Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload7.5 High
- tigroumeow ai engine – mcp server & ai chatbot for wordpress, with claude, chatgpt & geminiAI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parameter4.2 Medium
- jeromedevome grrGRR vulnerable to Arbitrary File Read and Deletion7.2 High
- asterisk, asterisk certified-asterisk +1 moreAsterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE7.5 High
- sunhillo surelineSunhillo SureLine Path Traversal via radarUpdater.cgi8.7 High
- mlflowMLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source7.5 High
- gtsteffaniak filebrowserFileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory8.6 High
- sebhildebrandt systeminformationsysteminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net3.3 Low
- veeam backup and replicationA vulnerability allowing an authenticated user with the Restore Operator role, who also controls...5.9 Medium
- veeam backup and replicationA vulnerability allowing an authenticated user with the Restore Operator role, who also controls...5.9 Medium
- watchguard fireware osFireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root7.1 High
- dexmal dexboticDexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal5.3 Medium
litellmPyPILiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`8.1 High- crownpku rasa nlu chicrownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal5.3 Medium
- octopus deploy serverIn affected versions of Octopus Server, a user with permission to upload a malicious nuget...5.1 Medium
- icret easyimages2.0EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php6.9 Medium
- wwbn avideoWWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header6.9 Medium
- sourcecodester online food ordering systemSourceCodester Online Food Ordering System delete.php unlink path traversal6.9 Medium
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS Golden...5.5 Medium
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....5.5 Medium
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....7.8 High
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS Golden...5.5 Medium
- Show moreLoading…