CWE-23: Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Also known as Zip Slip.
A kind of CWE-22 Path traversal.
From the CWE List. © The MITRE Corporation.
Newest
- sharepoint products copymove for sharepoint 2019, copymove for sharepoint v6 +1 more SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user... 5.0 Medium
- freescout-help-desk freescout FreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Files 4.4 Medium
- jetbrains intellij idea In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references... 3.3 Low
- jetbrains intellij idea In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container... 7.5 High
- zeroturnaround zt-zip zt-zip: ZipUtil.unpack can change file permissions of output directory 6.9 Medium
- aws aws-serverless-mcp-server Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server 6.9 Medium
- jovancoding network-ai Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name 8.7 High
- jovancoding network-ai Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID 8.7 High
- beam-cloud beta9 worker Beta9 container escape via unvalidated sandbox file paths 9.9 Critical
- oray pugongying x5 pro Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal 9.4 Critical
- hasenbanck sevenz-rust2 sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites 6.1 Medium
- moodle Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal 7.1 High
- veeam management pack for microsoft system center A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform... 8.8 High
- dell powerprotect data domain PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions... 6.5 Medium
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... 3.8 Low
- aws multi-model-server Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 9.3 Critical
- bulwarkmail webmail Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal... 5.3 Medium
- jetbrains datalore In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint... 7.5 High
- totalav CVE-2026-110746 7.8 High
- perforce p4 (helix core) Path traversal via logging configuration in P4Search 7.3 High
- qnap systems inc. qumagie WebSocket timelapse path traversal and command injection 8.6 High
- qnap systems inc. download station Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter 8.7 High
- cisco secure email, secure email gateway, asyncos +2 more Cisco Secure Email Gateway Arbitrary File Write Vulnerability 9.8 Critical
- coderaiser cloudcmd Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack 8.7 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Microsoft OpenSSH for Windows Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Shell Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Shell Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Internet (wininet.dll) Tampering Vulnerability 4.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Windows libarchive Tampering Vulnerability 6.5 Medium
- satel netco design Satel Netco Design Relative Path Traversal 5.3 Medium
- satel netco design Satel Netco Design Relative path traversal 8.7 High
- ollama Path Traversal leading to Remote Code Execution in Ollama 6.9 Medium
- cisco license on-prem Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability 9.1 Critical
- apache impala Apache Impala: Path traversal executes JARs outside trusted paths 6.5 Medium
- @backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 more Backstage: Improper input validation in TechDocs static content requests 6.5 Medium
- openbsd openssh In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be... 4.2 Medium
- hkuds vibe-trading HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path 8.7 High
- tryghost ghost Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe 8.5 High
- cato networks sdp client Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation 8.5 High
- watchguard fireware, fireware os +1 more Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read 8.2 High
- google osv-scalibr Path Traversal in VMDK Extractor in OSV-SCALIBR 6.9 Medium
- hitachi energy rtu500 series cmu firmware A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500... 9.1 Critical
- suse rancher, rancher fleet +1 more Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory 6.5 Medium
- hgiga oaklouds-bulletin v3-2.0, oaklouds-bulletin v3-3.0 +1 more HGiga｜OAKlouds - Arbitrary File Read 8.7 High
- cisco identity services engine software, identity services engine +1 more Cisco ISE Arbitrary File Access Vulnerability 7.2 High
- cisco secure email, secure email and web manager +1 more Cisco Secure Email Gateway Security Hardening Release 9.8 Critical
- contec co., ltd. fxa3000, fxa3000-[][], fxa3020 +17 more +19 more Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If... 8.6 High
- contec co., ltd. sga1000 Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary... 8.6 High
- paessler prtg network monitor A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible... 8.6 High
- dataease A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component. 4.3 Medium
- Show olderLoading…