CWE-24: Path Traversal: '../filedir'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "../" sequences that can resolve to a location that is outside of that directory.
A kind of CWE-23 Relative Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- codelyfe stupid simple cmscodelyfe Stupid Simple CMS rename.php path traversal5.4 Medium
- codelyfe stupid simple cmscodelyfe Stupid Simple CMS rename.php path traversal4.3 Medium
- rmountjoy92 dashmachinermountjoy92 DashMachine delete_file path traversal4.6 Medium
- kotchasan online accounting systemระบบบัญชีออนไลน์ Online Accounting System image.php path traversal3.5 Low
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System FileDownload.ashx path traversal4.3 Medium
- otcmsOTCMS usersNews_deal.php path traversal3.5 Low
- otcmsOTCMS path traversal3.5 Low
- kylinsoft youker-assistantKylinSoft youker-assistant restore_all_sound_file path traversal4.4 Medium
- iuok yfcmf-tp6YFCMF Ajax.php path traversal4.3 Medium
- iuok yfcmf-tp6YFCMF index.php path traversal4.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Path Traversal Vulnerabilities6.0 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Path Traversal Vulnerabilities6.0 Medium
- cisco catalyst sd-wan manager, sd-wan vmanage +1 moreA vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filtering of directory traversa…4.4 Medium
- go-fastdfs project go-fastdfssjqzhang go-fastdfs File Upload uploa upload path traversal7.3 High
- teacms project teacmsXiaoBingBy TeaCMS upload path traversal6.3 Medium
- rails-cv-app project rails-cv-apprails-cv-app uploaded_files_controller.rb path traversal3.5 Low
- httpserver project httpserverRamseyK httpserver URI ResourceHost.cpp getResource path traversal5.3 Medium
- growthbookGrowthBook account creation and file upload vulnerability in self-hosted configurations7.5 High
- keysight sensor management serverA path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager...9.8 Critical
- dominionvoting imagecast x, dominion voting system imagecast x application, imagecast x firmware +2 more2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-246.8 Medium
- apache hadoopApache Hadoop Privilege escalation vulnerability8.8 High
- xwiki, xwiki xwiki-platform +1 morePath Traversal in XWiki Platform2.7 Low
- hancom anysign4pcanySign directory traversal vulnerability7.5 High
- phpZipArchive::extractTo may extract outside of destination dir5.3 Medium
- canonical apportApport info disclosure via path traversal bug in read_file6.5 Medium
- demon1a discord-reconPath Traversal at Discord-Recon .recon Command Path6.5 Medium
- hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 moreAuthenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.48.6 High
- kubernetes secrets store csi driverKubernetes Secrets Store CSI Driver sync/rotate directory traversal5.8 Medium
- kubernetes secrets store csi driver, google secret manager provider for secret store csi driver, hashicorp vault provider for secrets store csi driver +1 more +3 moreKubernetes Secrets Store CSI Driver plugin directory traversals4.9 Medium
- adobe git-server, helix +1 moreGHSL-2020-133: Insufficient validation of user input in resolveRepositoryPath function5.9 Medium