CWE-23: Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Also known as Zip Slip.
A kind of CWE-22 Path traversal.
From the CWE List. © The MITRE Corporation.
Newest
- iliasAn issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary...3.3 Low
- softing secure integration serverAn issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration...6.6 Medium
- aws projenRelative path traversal in the generated file manifest cleanup component in projen6.8 Medium
- apache freemarkerApache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks9.1 Critical
- fortra goanywhere mftPath Traversal in Fortra's GoAnywhere MFT Endpoint7.7 High
- wangyihang githackerGitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git server5.3 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...6.5 Medium
- ragic enterprise cloud databaseRagic｜Enterprise Cloud Database - Arbitrary File Read6.9 Medium
- microsoft power automate agent for virtual desktops, power automate for desktop +1 moreMicrosoft Power Automate Desktop Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DNS Elevation of Privilege Vulnerability6.7 Medium
- siemens simove fleetmanager v3.1, simove fleetmanager v3.2, simove fleetmanager v3.3 +5 more +7 moreA vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE...9.2 Critical
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.1 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.4 High
- apache antApache Ant: Path traversal in ftp and scp tasks allows arbitrary file write7.4 High
- eclipse foundation aeriosEclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability...8.8 High
- amazon amazon-ssm-agentPath traversal in the aws:downloadContent plugin in amazon-ssm-agent8.7 High
- amazon diagram-as-codeZip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)6.8 Medium
- cloudreveCloudreve before 4.16.1 Path Traversal via Remote Download2.3 Low
- apache camelApache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result7.5 High
- apache camelApache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir9.1 Critical
- apache camelApache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir5.5 Medium
- canonical lxdInstance template path traversal allows arbitrary host file write as root9.9 Critical
- 4mosan security technology management center4MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File Read8.7 High
- perber leafwikiFileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter8.8 High
- canonical apportPath Traversal Vulnerability in apport-unpack6.7 Medium
- microsoft fabricMicrosoft Fabric Elevation of Privilege Vulnerability9.9 Critical
- apache inlongApache InLong: Agent path traversal via unvalidated file source path7.5 High
- jknack handlebars.javaHandlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass7.5 High
- cliuniget: Path Traversal in Hook Files - Directory Escape Vulnerability8.4 High
- elastic kibanaRelative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources7.3 High
- strategy11 formidable digital signaturesFormidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field9.8 Critical
- microsoft powershell, powershell 7.6, microsoft powershell 7.4 +1 more +3 moreMicrosoft PowerShell Remote Code Execution Vulnerability8.8 High
- microsoft .net framework, .net framework 3.5, .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2 +6 more +8 more.NET Framework Elevation of Privilege Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Information Disclosure Vulnerability6.5 Medium
- zoom communications vdiZoom VDI - Path Traversal7.1 High
- zohocorp manageengine m365 manager plus, manageengine m365 security plus +1 morePath Traversal8.5 High
- samsung healthRelative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access...6.9 Medium
- parisneo parisneo/lollmsPath Traversal Vulnerability in parisneo/lollms7.5 High
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +2 more +4 moreDell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path...6.5 Medium
- livebookPath traversal in imported file_entries name allows arbitrary file write via URL-type entry download7.0 High
- tecno mobile hi browserPathTravelsal Vulnerability in com.talpa.hibrowser7.5 High
- kyndryl-open-source hashi-vault-jshashi-vault-js has a path traversal and query parameter injection8.7 High
- tigera calico, calico cloud, calico enterprise +2 moreL7 policy bypass via unnormalized HTTP path matching7.9 High
- vacron vin-ds783e-e6Vacron｜IP Camera - Arbitrary File Read7.1 High
- opensolution quick.cmsPath Traversal in Quick.CMS5.1 Medium
- erlang otpRelative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass4.8 Medium
- chimpstudio wp foodbakeryWP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action8.1 High
- gtsteffaniak filebrowserFileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files7.7 High
- No product listedDirectory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain...6.5 Medium
- aws aws-healthomics-mcp-serverPath traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-server6.8 Medium
- Show moreLoading…