CWE-23: Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Also known as Zip Slip.
A kind of CWE-22 Path traversal.
From the CWE List. © The MITRE Corporation.
Newest
- tum navigatumNavigaTUM has a Path Traversal Vulnerability in the propose_edits functionality8.8 High
- suse rancherLocal Path Provisioner vulnerable to Path Traversal via parameters.pathPattern9.9 Critical
- chainguard apkoapko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside base7.5 High
- vltvlt Mishandles Path Sanitization for tar5.9 Medium
- pnpmpnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)6.5 Medium
- pnpmpnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin6.5 Medium
- gotac statistics database systemGotac｜Statistics Database System - Arbitrary File Read8.7 High
- mindsdbMindsDB has improper sanitation of filepath that leads to information disclosure and DOS8.1 High
- sylphx filesystem mcp@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading...7.5 High
psitransfernpmPsiTransfer has Zip Slip Path Traversal via TAR Archive Download8.1 High- sun.net wmproSunnet｜WMPro - Arbitrary File Read8.7 High
- yealink sip-t21\(p\)e2 firmwareYealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged...4.3 Medium
- abelche cola dnslogCola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is...7.5 High
- ragic enterprise cloud databaseRagic｜Enterprise Cloud Database - Arbitrary File Read8.7 High
- microsoft access, office, 365 apps +7 more +9 moreMicrosoft Access Remote Code Execution Vulnerability7.8 High
- argoproj argo-workflows, argo workflows +1 moreargoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links8.1 High
- cksource ckfinderIn CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from...5.0 Medium
- ni labviewRelative Path Traversal Vulnerability in NI System Web Server8.7 High
- uniong webitrUniong｜WebITR - Arbitrary File Read7.1 High
- mispapp/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site...4.1 Medium
github.com/lf-edge/ekuiperGo,github.com/lf-edge/ekuiper/v2Go +1 moreLF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction9.3 Critical- rsa authentication agent for windowsIn RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to...9.8 Critical
- sonicwall email security, email security appliance 5000 firmware, email security appliance 5050 firmware +3 more +5 moreA Path Traversal vulnerability has been identified in the Email Security appliance allows an...5.3 Medium
- astroAstro Development Server is Vulnerable to Arbitrary Local File Read3.5 Low
- code-projects email logging interfacecode-projects Email Logging Interface signup.cpp path traversal4.8 Medium
- fortinet fortiwebA relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0...9.4 Critical
- iq service international iq-supportIQ Service International｜IQ-Support - Arbitrary File Read8.7 High
- privatebinPrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal5.8 Medium
- qnap download stationDownload Station2.3 Low
- qnap qumagieQuMagie7.8 High
- dell secure connect gateway, secure connect gateway scg 5.0 application and appliance +1 moreDell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00...4.3 Medium
- apache tomcat, siemens simatic cn 4100 +1 moreApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal6.3 Medium
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal6.3 Medium
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal8.3 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal8.3 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal8.2 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal8.6 High
- berabuddies agentflowFlowring Technology｜Agentflow - Arbitrary File Reading through Path Traversal8.7 High
- argoproj argo-workflows, argo workflows +1 moreargo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite8.1 High
- revolution slider slider revolutionSlider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read6.5 Medium
- ankitects ankiIn Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written...2.9 Low
- langbot-app langbotLangBot has a cross-directory file upload vulnerability, which could lead to system takeover8.6 High
- djangoproject djangoDjango vulnerable to partial directory traversal via archives3.1 Low
- nncpnncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving...6.4 Medium
- esm-dev esm.shLocal File Inclusion in esm.sh7.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload5.5 Medium
- lumen-oss luanoxRelative Path Traversal in Luanox6.9 Medium
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent path traversal local privilege escalation9.3 Critical
- digilent waveformsRelative Path Traversal Vulnerability in Digilent WaveForms8.5 High
- Show moreLoading…