CWE-23: Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Also known as Zip Slip.
A kind of CWE-22 Path traversal.
From the CWE List. © The MITRE Corporation.
Newest
- xyproto algernonAlgernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir8.2 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion9.4 Critical
- trend micro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA directory traversal vulnerability in the Apex One (on-premise) server could allow a pre...6.7 Medium
- xwiki xwiki-commonsXWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slash9.3 Critical
- themeum kirki – freeform page builder, website builder & customizerKirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIP7.5 High
- difyDify v1.14.1 Path Traversal via Plugin Daemon Internal API Access9.3 Critical
- microsoft live preview, visual studio code - live preview extension +1 moreVisual Studio Code Information Disclosure Vulnerability5.5 Medium
- siemens ros#A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a...9.3 Critical
- gibbonedu gibbonGibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS...6.9 Medium
- webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 moreInsufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin...8.6 High
- codingjoe django-s3filedjango-s3file: Relative path traversal9.9 Critical
- horsicq detect-it-easy, die-engine +1 moreDetect-It-Easy < 3.21 Path Traversal Arbitrary File Write6.8 Medium
- oppo coloros assistantColorOS Assistant Path Traversal Vulnerability7.1 High
- getsimpletool mcpo-simple-servergetsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversal6.9 Medium
- openc3 cosmosOpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenames4.3 Medium
- espocrmEspoCRM has Admin TemplateManager path traversal that allows arbitrary file read write and delete7.2 High
- jupyter nbconvertnbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding6.5 Medium
- teamt5 threatsonar anti-ransomwareTeamT5｜ThreatSonar Anti-Ransomware - Arbitrary File Deletion7.2 High
- openclawOpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags8.9 High
- anviz cx7 firmwareAnviz CX7 Firmware Relative Path Traversal4.9 Medium
- weblateWeblate: Remote code execution during backup restoration8.1 High
- cisco unity connectionCisco Unity Connection Arbitrary File Download Vulnerability6.5 Medium
- cisco unity connectionCisco Unity Connection Arbitrary File Download Vulnerability6.5 Medium
- fortinet fortiwebA relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0...6.2 Medium
- astral-sh uvAstral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries8.7 High
- nokia mantaray nmA Relative Path Traversal vulnerability in Nokia MantaRay NM5.7 Medium
- mervinpraison praisonaiPraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction8.1 High
- linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreONNX: Path Traversal via Symlink8.7 High
- scitokens scitokens-cpp, cpp library +1 moreSciTokens C++: Relative Path Traversal Vulnerability8.3 High
- tautulliTautulli: Unauthenticated Path Traversal in `/newsletter/image/images` endpoint8.7 High
- gigabyte control centerGIGABYTE｜Gigabyte Control Center - Arbitrary File Write9.2 Critical
- calibre-ebook calibrecalibre has a path traversal vulnerability8.2 High
- pf4j project pf4jpf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names7.5 High
- ory oathkeeperOry Oathkeeper has a path traversal authorization bypass10.0 Critical
- stirling pdf, stirling-tools stirling-pdf +1 moreStirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction8.1 High
- suitecrmSuiteCRM Vulnerable to Directory Traversal to DoS in Modules4.9 Medium
- suitecrmSuiteCRM has Relative Path Traversal via ModuleBuilder Modules ExportCustom Action4.9 Medium
- No product listedA zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows...7.5 High
- pyload, pyload-ng project pyload-ng +1 morepyLoad: Arbitrary File Write via Path Traversal in edit_package()7.1 High
- johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 moreJohnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion8.7 High
- rikyoz bit7zbit7z has a path traversal vulnerability5.5 Medium
- getsimple-ce getsimple cms, getsimplecms-ce +1 moreGetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability8.8 High
- vmware spring data geode, red hat fuse 7, vmware spring data gemfire +2 moreZip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)8.2 High
- erlang otpTFTP Path Traversal2.3 Low
- dell powermax, unisphere for powermax +1 moreDell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability....8.1 High
- openclawOpenClaw < 2026.2.12 - Arbitrary File Write via Untrusted sessionFile Path7.1 High
- qnap qsync centralQsync Central1.3 Low
- ge vernova enervistaEnervista UR Setup Directory Traversal Vulnerability2.9 Low
- frangoteam fuxaFUXA has a Path Traversal Sanitization Bypass8.6 High
- markusproject markusZip Slip in MarkUs config upload allowing RCE9.1 Critical
- Show moreLoading…