CWE-23: Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Also known as Zip Slip.
A kind of CWE-22 Path traversal.
From the CWE List. © The MITRE Corporation.
Newest
- open-emr openemrOpenEMR Has Directory Traversal in Load Code feature4.6 Medium
- apache commons vfsApache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT7.5 High
- quivr, stangirard stangirard/quivr +1 morePath Traversal in stangirard/quivr4.3 Medium
- modelscope agentscope, modelscope/agentscope +1 morePath Traversal in modelscope/agentscope9.1 Critical
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal and OS Command Injection in parisneo/lollms-webui6.3 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePath Traversal in mintplex-labs/anything-llm7.2 High
- parisneo parisneo/lollms, lollms web ui +1 moreRelative Path Traversal in parisneo/lollms-webui4.4 Medium
- aimhubio aimhubio/aim, aimstack aim +1 moreArbitrary File/Directory Deletion in aimhubio/aim5.3 Medium
- polyaxon polyaxon/polyaxonUnauthorized File Deletion in polyaxon/polyaxon7.5 High
- n-able n-centralN-central Path Traversal5.3 Medium
- logicaldoc community, enterprise +1 moreArbitrary File Read via Document API7.1 High
- logicaldoc, logicaldoc community, enterprise +2 moreRemote Code Execution (RCE) via Arbitrary File Write In Document API8.7 High
- johndarrel wp ghost (hide my wp ghost) – security & firewall, wpplugins hide my wp ghost +1 moreWP Ghost <= 5.4.01 - Unauthenticated Limited File Read7.5 High
- nvidia nemo, nemo framework +1 moreNVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal...7.1 High
- microsoft remote desktop client, remote desktop client for windows desktop, windows 10 version 1507 +36 more +38 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- rackLocal File Inclusion in Rack::Static7.5 High
- gmod apolloGMOD Apollo Relative Path Traversal9.3 Critical
- notfound delete comments by statusWordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability7.5 High
- pwndocPwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin6.5 Medium
- ibm cognos analyticsIBM Cognos Analytics path traversal6.5 Medium
- acquia mautic, mautic mautic/core +1 moreRemote Code Execution & File Deletion in Asset Uploads9.1 Critical
- mayurik best church management softwareSourceCodester Best Church Management Software profile_crud.php path traversal5.3 Medium
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System manage-nurse.php path traversal6.9 Medium
- opensolon solonopensolon Solon StaticMappings.java path traversal5.3 Medium
- ping identity pingam java policy agentPingAM Java Policy Agent path traversal9.2 Critical
- bitapps bit assist, bitpressadmin chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist +1 moreBit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter6.5 Medium
- bitapps bit assist, bitpressadmin chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist +1 moreBit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function4.9 Medium
- q-free maxtimeA CWE-23 "Relative Path Traversal" in the file upload mechanism in Q-Free MaxTime less than or...7.2 High
- safetytest cloud-master serverSafetytest Cloud-Master Server static path traversal6.9 Medium
- flutter image picker androidUnsanitized Filenames in Flutter package image_picker_android Allow File Overwrites2.1 Low
- flutter file selector androidUnsanitized Filenames in Flutter package file_selector_android Allow File Overwrites2.1 Low
- apache solrApache Solr: Configset upload on Windows allows arbitrary path write-access5.4 Medium
- fedora repository repository, fedorarepository fcrepo +1 moreFedora Repository archive extraction path traversal8.7 High
- fortinet fortimanagerA relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through...5.2 Medium
- fortinet fortirecorderA relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and...5.2 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversal6.9 Medium
- tsinghua unigroup electronic archives systemTsinghua Unigroup Electronic Archives System exampleDownload.html path traversal5.3 Medium
- dahua ipc-hdw1200s, ipc-hfw1200s, ipc-hfw2300r-z +1 more +3 moreDahua IPC-HFW1200S Web Interface Sha1Account1 path traversal5.3 Medium
- intelbras vip s3020 g2, vip s4020 g2, vip s4020 g3 +1 more +3 moreIntelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal5.3 Medium
- fortinet fortiwlmA relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5...9.6 Critical
- chunghwa telecom topm-clientChunghwa Telecom topm-client - Arbitrary File Read6.5 Medium
- cht tenderdoctransferChunghwa Telecom TenderDocTransfer - Arbitrary File Write8.1 High
- cjbi wetech-cmscjbi wetech-cms Database Backup BackupFileUtil.java backup path traversal5.3 Medium
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft SharePoint Information Disclosure Vulnerability6.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in...8.0 High
- trcore dvcTRCore DVC - Arbitrary File Upload through Path Traversal9.8 Critical
- trcore dvcTRCore DVC - Arbitrary File Upload through Path Traversal9.8 Critical
- trcore dvcTRCore DVC - Arbitrary File Upload through Path Traversal9.8 Critical
- trcore dvcTRCore DVC - Arbitrary File Upload through Path Traversal9.8 Critical
- trcore dvcTRCore DVC - Arbitrary File Upload through Path Traversal9.8 Critical
- Show moreLoading…