CWE-24: Path Traversal: '../filedir'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "../" sequences that can resolve to a location that is outside of that directory.
A kind of CWE-23 Relative Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- apache software foundation ofbiz Apache OFBiz: Authenticated Path Traversal in Catalog Image Management 6.5 Medium
- axel download accelerator axel Axel Download Accelerator Path Traversal via URL Filename Decoding 7.0 High
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... 3.4 Low
- blinko Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via... 8.8 High
- bugtracker.net Path Traversal in BugTracker.NET 7.1 High
- papermerge Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a ... 7.5 High
- aquasec trivy Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to... 2.5 Low
- jknack handlebars.java Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4,... 7.5 High
- netgate pfsense ce, pfsense plus +1 more In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI)... 8.5 High
- zettlab d6 ultra Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".."... 6.3 Medium
- frauscher sensortechnik fds 102 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file 8.6 High
- splunk, splunk enterprise +1 more Path Traversal through Knowledge Bundle Replication in Splunk Enterprise 5.4 Medium
- zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra... 3.1 Low
- exim Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and... 8.4 High
- emlog Emlog Local File Inclusion (LFI) 7.7 High
- xwiki xwiki-platform XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+ 8.2 High
- suse libzypp libzypp .repo files can have an optional path which can lead to path traversal attacks 6.5 Medium
- webmin Webmin before 2.640 does not safely construct a filename for saving of an attachment within the... 9.4 Critical
- xwiki xwiki-platform XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin 5.9 Medium
- joplinapp joplin, msiemens one2html +1 more Joplin: Path traversal in OneNote importer allows overwriting arbitrary files 8.2 High
- roxy-wi Roxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version Viewer 5.7 Medium
- ocaml opam, debian linux, red hat enterprise linux 10 +1 more +3 more In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to... 7.3 High
- fortinet fortisandbox A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,... 9.1 Critical
- b3log siyuan SiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView` 8.5 High
- huawei harmonyos Path traversal vulnerability in the certificate management module. Impact: Successful... 5.9 Medium
- fonoster Fonoster is vulnerable to directory traversal 5.8 Medium
- nekename opendeck OpenDeck affected by path traversal allows arbitrary file read 5.9 Medium
- efforthye fast-filesystem-mcp fast-filesystem-mcp has a Path Traversal vulnerability 7.5 High
- redaxo Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read 8.3 High
- getsol eopkg eopkg has Path Traversal: '../filedir' vulnerability 5.8 Medium
- cvat-ai cvat, cvat computer vision annotation tool +1 more CVAT vulnerable to directory traversal via mounted share listing 5.3 Medium
- mintlify, mintlify platform +1 more A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform... 6.4 Medium
- emlog Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the... 9.1 Critical
- lanol filecodebox A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes... 7.5 High
- code-projects email logging interface code-projects Email Logging Interface signup.cpp path traversal 4.8 Medium
- mayurik pet grooming management software A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1... 8.2 High
- hikvision csmp isecure center Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25... 8.3 High
- d-link dsr-150 An unauthenticated Local File Inclusion (LFI) vulnerability in D-Link DSR series routers allows... 8.6 High
- No product listed A path traversal vulnerability in FastX3 thru 3.3.67 allows an unauthenticated attacker to read... 7.3 High
- No product listed A path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows... 6.5 Medium
- jeecg boot Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint... 6.3 Medium
- jeecg boot Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This... 6.3 Medium
- esm-dev esm.sh esm.sh writes arbitrary files via path traversal in `X-Zone-Id` header 5.5 Medium
- usememos memos Memos Vulnerable to Path Traversal via the CreateResource Endpoint 4.3 Medium
- liquidfiles LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local... 3.8 Low
- ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 more RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. 5.0 Medium
- xorux lpar2rrd KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal 8.8 High
- gnu tar GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with... 4.1 Medium
- canonical juju Zip slip vulnerability in Juju 8.8 High
-
github.com/lf-edge/ekuiperGo,github.com/lf-edge/ekuiper/v2Go +1 more LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement 8.5 High - Show olderLoading…