CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- readestReadest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)6.5 Medium
- readestReadest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview8.6 High
- alan health alan: health insuranceAlan: Health Insurance for Android 1.450.0 Path Traversal via ShareReceiverActivity6.9 Medium
- ibm watson speech services cartridgeIBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith6.5 Medium
- comfast cf-wr632axComfast CF-WR632AX Multipart webmgnt path traversal10.0 Critical
- solidtime-io solidtimeSolidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle6.3 Medium
- cisco unified computing system central softwareCisco Unified Computing System Central Remote Code Execution Vulnerability7.6 High
- coderCoder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal2.3 Low
- phoenix contact plcnext engineerPath traversal in plug-in deployment8.6 High
- tubitak bilgem software technologies research institute imzagerPath Traversal in TÜBİTAK BİLGEM's İmzager3.3 Low
- unknown wpvivid — backup, migration & stagingWPvivid Backup & Migration < 0.9.138 - Admin+ Path Traversal via Local Backup Directory Setting5.5 Medium
- unknown wpvivid — backup, migration & stagingWPvivid Backup & Migration < 0.9.137 - Admin+ Path Traversal via Staging Site Path5.5 Medium
- quest foglight for databasesQuest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability8.8 High
- quest foglight for databasesQuest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability8.8 High
- quest foglight for databasesQuest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability8.8 High
- quest foglight for databasesQuest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability8.8 High
- quest foglight for databasesQuest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability8.8 High
- quest foglight for databasesQuest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability8.8 High
libcgi-pm-perlDebian,perl-CGIAlmaLinux +1 moreCGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths8.8 High- tanium data service, interact +1 moreTanium addressed a path traversal vulnerability in Tanium Data Service.5.0 Medium
- docker buildxBake filesystem path entitlements approval can be skipped for path using basename prefix1.8 Low
- hewlett packard enterprise (hpe) fabric composerAuthenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read3.1 Low
- isomorphic-gitisomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)8.8 High
- isomorphic-gitisomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout5.3 Medium
- yeti-platform yetiYeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export7.1 High
- yeti-platform yetiYeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write8.3 High
- zeroturnaround zt-zipzt-zip: Path traversal in fluent API unpack6.1 Medium
- phpmyadmin motranslatorphpMyAdmin MoTranslator Loader.php getTranslator path traversal5.3 Medium
- elastic kibanaImproper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion7.3 High
- koodo-readerKoodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers6.9 Medium
- dataease sqlbotSQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint5.1 Medium
- finsys dockhandDockhand before 1.0.54 Path Traversal via Stack Environment Routes8.7 High
- vivo bluelm copilotImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the...5.1 Medium
- eclipse foundation semantic modeling framework (esmf)Improper limitation of paths in py-aspect-model-loader9.8 Critical
- wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simplerFluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter8.1 High
- satindersingh contact form extender for divi – submissions db & extra fieldsContact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal7.5 High
- kodezen academy lms – ai course builder, quizzes, certificates & elearningAcademy LMS <= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Route4.3 Medium
- alex githatu buddypress xprofile custom image fieldBuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler9.1 Critical
- No product listedA Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0...9.8 Critical
- No product listedAn issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS...9.8 Critical
- grafana enterprise metrics (gem), mimir +1 moreArbitrary file read via Alertmanager receiver configuration in Grafana Mimir7.7 High
- control web panel web panelControl Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor8.7 High
- sea-team gofoundGoFound through 1.4.1 Path Traversal via database parameter in /api/db/drop7.2 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a...6.1 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a...5.7 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a...6.1 Medium
- @fastify/reply-from@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape8.2 High
- @fastify/http-proxy@fastify/http-proxy vulnerable to prefix escape via decoded route parameters9.1 Critical
- @fastify/http-proxy@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments5.9 Medium
- deepset-ai farmdeepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal2.4 Low
- Show moreLoading…