CWE-24: Path Traversal: '../filedir'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "../" sequences that can resolve to a location that is outside of that directory.
A kind of CWE-23 Relative Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- erxesErxes Path Traversal vulnerability5.4 Medium
- cure53 dompurifyIn DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is...7.5 High
- pwsdashboard personal weather station dashboardPersonal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read...5.8 Medium
- srimax output messengerOutput Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper...7.2 High
- google androidIn multiple locations, there is a possible Android/data access due to a path traversal error....4.4 Medium
- artifex ghostscriptIn Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8...4.5 Medium
- academiaerp student information system, serosoft academia student information system +1 moreAn arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information...6.4 Medium
- infodraw media relay service, pmrs-102 firmware +1 moreIn Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading...5.8 Medium
- gnu mailmanGNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read...5.8 Medium
- fusiondirectoryA path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read...5.3 Medium
org.noear:solon-viewMavenopensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversal5.3 Medium- intevation openslidesA directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to...3.0 Low
- mockoonMockoon has a Path Traversal and LFI in the static file serving endpoint7.5 High
- mayurik best church management softwareSourceCodester Best Church Management Software profile_crud.php path traversal5.3 Medium
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System manage-nurse.php path traversal6.9 Medium
- opensolon solonopensolon Solon StaticMappings.java path traversal5.3 Medium
- safetytest cloud-master serverSafetytest Cloud-Master Server static path traversal6.9 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversal6.9 Medium
- dahua ipc-hdw1200s, ipc-hfw1200s, ipc-hfw2300r-z +1 more +3 moreDahua IPC-HFW1200S Web Interface Sha1Account1 path traversal5.3 Medium
- intelbras vip s3020 g2, vip s4020 g2, vip s4020 g3 +1 more +3 moreIntelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal5.3 Medium
- cjbi wetech-cmscjbi wetech-cms Database Backup BackupFileUtil.java backup path traversal5.3 Medium
- cisco prime infrastructure, evolved programmable network manager, evolved programmable network manager (epnm) +2 moreCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal Vulnerability6.5 Medium
- esafenet cdgESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal5.3 Medium
- moxa mxview one series, mxview one +1 moreMXview One Series vulnerable to Path Traversal6.0 Medium
- abcd abcd2, abcd-community abcd +1 moreABCD ABCD2 show_image.php path traversal5.3 Medium
- ivanti docs@work, docs\@work +1 moreIvanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The...5.0 Medium
- @clerk nuxtPath Traversal: '../filedir' in Nuxt Devtools8.8 High
- easyspiderNaiboWang EasySpider HTTP GET Request server.js path traversal5.3 Medium
- dedecmsDedeCMS path traversal5.3 Medium
- dedecmsDedeCMS update_guide.php path traversal4.3 Medium
- panwei eoffice oa, weaver e-office +1 morePanwei eoffice OA Backend save_image.php path traversal4.7 Medium
- shibang communications ip network intercom broadcasting systemShibang Communications IP Network Intercom Broadcasting System busyscreenshotpush.php path traversal5.4 Medium
- lakernote easyadminlakernote EasyAdmin saveReportFile path traversal6.3 Medium
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....7.5 High
- panda xgo pandaxPandaXGO PandaX user.go ExportUser path traversal6.3 Medium
- panda xgo pandaxPandaXGO PandaX upload.go DeleteImage path traversal5.4 Medium
- zkteco zkbio mediaZKTeco ZKBio Media Service Port 9999 download path traversal5.3 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: directory traversal vulnerability5.3 Medium
- kuerp project kuerpSichuan Yougou Technology KuERP Service.php del_sn_db path traversal5.4 Medium
- linkwechatqwdigital LinkWechat Universal Download Interface resource path traversal4.3 Medium
- mate-desktop atrilRemote Code Execution Vulnerability in Atril's EPUB ebook parsing8.5 High
- code-projects employee profile management systemcode-projects Employee Profile Management System download.php path traversal3.5 Low
- csdeshang dsshopDeShang DSShop MemberAuth.php path traversal5.4 Medium
- csdeshang dsmallDeShang DSMall MemberAuth.php path traversal5.4 Medium
- wpcompress wp compress, aresit wp compress – instant performance & speed optimization +1 moreWP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css9.1 Critical
- unknown-o download-stationunknown-o download-station index.php path traversal5.3 Medium
- inis project inisInis GET Request File.php path traversal3.5 Low
- sourcecodester medicine tracking system, oretnom23 medicine tracker system +1 moreSourceCodester Medicine Tracking System path traversal6.3 Medium
- icret easyimages, easyimages2.0 project easyimages2.0 +1 moreicret EasyImages hide.php path traversal3.1 Low
- oretnom23 simple student attendance systemSourceCodester Simple Student Attendance System path traversal6.3 Medium
- Show moreLoading…