CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- deepset-ai farmdeepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal5.3 Medium
- webpro-nl knipWebpro-nl Knip Workspace IssueFixer.ts writeFile path traversal5.3 Medium
- aklivity zillaAklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversal6.9 Medium
- http4khttp4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution8.2 High
- destiny.gg chatLobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile8.7 High
- jovancoding network-aiNetwork-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath8.7 High
- termix-ssh termixTermix-SSH Termix transferToHost path traversal9.4 Critical
- No product listedDirectory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain...7.5 High
- crocoblock jetformbuilderWordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability6.5 Medium
- beam-cloud beta9 gateway, beta9 worker +1 moreBeta9 host filesystem exposure via volume path traversal9.9 Critical
- beam-cloud beta9 workerBeta9 container escape via unvalidated sandbox file paths9.9 Critical
- oray pugongying x5 proOray Pugongying X5 Pro openwrt_release config_restore_ex path traversal9.4 Critical
- google androidIn sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to...8.4 High
- google androidIn getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due...4.0 Medium
- ffmpegFFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path5.3 Medium
- deepseek-ai deepinferDeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter6.3 Medium
- No product listedWebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback9.8 Critical
- acadlix lms – ai quiz maker, online exam & course plugin for wordpressAcadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameter9.1 Critical
- villatheme revopic – photo reviews for woocommercePhoto Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter5.4 Medium
- unknown bulk media registerBulk Media Register < 2.01 - Author+ Arbitrary File Move via Path Traversal7.2 High
- @signalk resources-provider, signalk signalk-server +1 moreSignal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution9.8 Critical
- hasenbanck sevenz-rust2sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites6.1 Medium
- sabnzbdSABnzbd: Orphan-job path traversal permits arbitrary file deletion7.0 High
- stirling-tools stirling-pdfStirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass5.3 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Connection file paths and parameter keys escape the user's storage directory7.2 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: File Manager and storage-path tools act on a different path from the one checked7.1 High
- immich-app immichImmich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning service6.5 Medium
- mtzanidakis praktorpraktor: Telegram upload traversal permits persistent agent instruction injection8.2 High
- brainstorm force suredashWordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability5.0 Medium
- element labs lm studioLM Studio before 0.4.22+1 Path Traversal via Model Downloader8.7 High
- the gnu c library glibcgettext: Directory traversal via the LANGUAGE environment variable7.0 High
- rabilal js help desk – ai-powered support & ticketing systemJS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter4.9 Medium
- socfortress copilotSOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)10.0 Critical
- No product listedCallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route7.5 High
- n8n-io n8nn8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node8.2 High
- forgejoForgejo through 15.0.11, 16.0.7, and 17.0.1 Path Traversal via restore-repo6.8 Medium
- No product listedA path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows...7.5 High
- lightdashLightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key8.3 High
- kubeflow pipelinesKubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source7.5 High
- elated-themes frappeFrappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload9.4 Critical
- progress software ws ftp serverPath Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server5.3 Medium
- progress software ws ftp serverVirtual Folder Path Confinement Bypass in Progress WS_FTP Server9.1 Critical
- progress software ws ftp serverHost Administrator Path Containment Bypass in Progress WS_FTP Server9.1 Critical
- progress software ws ftp serverInformation Disclosure in Ad Hoc Transfer in Progress WS_FTP Server7.7 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities3.5 Low
- adobe digital editionsAdobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.3 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities8.8 High
- Show moreLoading…