CWE-23: Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Also known as Zip Slip.
A kind of CWE-22 Path traversal.
From the CWE List. © The MITRE Corporation.
Newest
- filebrowserFile Browser: Archive builder turns backslash filenames into path traversal (zip-slip)6.8 Medium
- microsoft windows admin centerWindows Admin Center (WAC) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows User Interface Core Elevation of Privilege Vulnerability7.8 High
- powershell 7.6, microsoft powershell 7.5, windows 10 version 1607 +24 more +26 moreWindows PowerShell Remote Code Execution Vulnerability8.0 High
- microsoft age of empires ii: definitive edition game, age of empires ii +1 moreGame: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability8.8 High
- ivanti xtractionPath traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated...7.7 High
- grokability snipe-itSnipe-IT: Directory traversal in displaySig7.1 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project...9.6 Critical
- siyuan-note siyuanSiYuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db7.7 High
- mockoonMockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)6.5 Medium
- librebookingLibreBooking path traversal8.6 High
- progress moveit transferAuthenticated Path Traversal allows MOVEit admins to view arbitrary system files4.5 Medium
- openbsd opensshscp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when...4.2 Medium
- openbsd opensshsftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...4.2 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass8.0 High
- microrealestateRelative path traversal vulnerability in MicroRealEstate file upload functionality allows...7.1 High
- owncloud 10ownCloud 10 is vulnerable to Relative Path Traversal8.0 High
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Edge for Android Information Disclosure Vulnerability6.8 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.1 High
- langroidLangroid: Path traversal in the file tools allows read/write outside configured current directory7.1 High
- allegroai allegroai/clearmlRelative Path Traversal in allegroai/clearml2.4 Low
- suse rancher, rancher fleet +1 morePath Traversal in Rancher Fleet ImageScan GitRepo Path Handler5.3 Medium
- zephyrproject zephyrPath traversal in Zephyr HTTP server static-filesystem resource handler allows unauthenticated remote arbitrary file read7.5 High
- pnpmpnpm: Transitive dependency alias path traversal allows project path override via symlink replacement8.8 High
- apache software foundation kvrocksApache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling2.4 Low
- siyuan-note siyuanSiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)7.5 High
- gogsGogs: Path Traversal in organization name results in RCE through Git hooks10.0 Critical
- presire qsnapperpath traversal via `config` parameter in qSnapper7.3 High
- jovancoding network-aiEnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data6.1 Medium
- jovancoding network-aiNetwork-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory6.5 Medium
- byrongamatos slopsmithSlopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCE7.6 High
- canonical microcephMicroCeph path traversal issue in the remote-import API5.1 Medium
- progress chef chef360Impact A security issue has been identified in Chef 360 that could allow unauthorized access to...8.6 High
- wertheim gmbh safecontroller software for vault rooms (safe deposit locker system)Path traversal in Wertheim SafeController Software allows authenticated users to download arbitrary files7.1 High
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability7.1 High
- microsoft visual studio codeVisual Studio Code Tampering Vulnerability6.5 Medium
- opensuse libzypplibzypp path traversal via "keyhint" in repomd.xml8.4 High
- fluxcd source-controllerSource controller: Improper path handling allows traversal5.3 Medium
- openstack ironicOpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image5.9 Medium
- jupyter jupyter/jupyter, server +1 morePath Traversal in jupyter/jupyter6.8 Medium
- interinfo dreammakerInterinfo｜DreamMaker - Arbitrary File Read6.9 Medium
- interinfo dreammakerInterinfo｜DreamMaker - Arbitrary File Read8.7 High
- remote spark (https://www.remotespark.com/) sparkviewRemote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCE10.0 Critical
- waterfall wf-500, waterfall-security wf-500 firmware +1 moreNozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500...7.5 High
- waterfall wf-500, waterfall-security wf-500 firmware +1 moreNozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in...8.7 High
- waterfall wf-500, waterfall-security wf-500 firmware +1 moreNozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in...8.8 High
- opensuse libzyppHandcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp8.8 High
- apache igniteApache Ignite: REST HTTP arbitrary file read vulnerability8.5 High
- gladinet triofoxGladinet Triofox Path Traversal in WOSDefaultHttpModule.dll7.5 High
- Show moreLoading…