CWE-25: Path Traversal: '/../filedir'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "/../" sequences that can resolve to a location that is outside of that directory.
A kind of CWE-23 Relative Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- sky co., ltd. skymec it manager, skysea client view +1 more SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this... 5.8 Medium
- swingmx swing music, swingmusic +1 more Directory Traversal & Filesystem can be accessed by a non-admin user 5.3 Medium
- riello netman, riello-ups netman 208 +1 more Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory... 9.1 Critical
- huawei harmonyos Denial of service (DoS) vulnerability in the office service. Successful exploitation of this... 3.3 Low
- tsinghua unigroup electronic archives system Tsinghua Unigroup Electronic Archives System exampleDownload.html path traversal 5.3 Medium
- woodruffw pyrage Malicious plugin names, recipients, or identities can cause arbitrary binary execution in pyrage 7.7 High
-
filippo.io/ageGo age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution No score -
agecrates.io,ragecrates.io +1 more rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution No score - fooplugins foogallery, https://fooplugins.com foogallery premium +1 more Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal 7.7 High
- franklin fueling system evo 5000, evo 550 +1 more Path Traversal vulnerability in Franklin Fueling System EVO 550/5000 7.5 High
- mate-desktop engrampa Path traversal via crafted cpio archives in Engrampa archivers 8.2 High
- biges safe life technologies electronics inc. vguard, biges vg-255-bv firmware, vg-255-df firmware +7 more +9 more Path Traversal in VGuard IP Camera Network Recorder 7.5 High
- mate-desktop atril Remote Code Execution Vulnerability in Atril's EPUB ebook parsing 8.5 High
- bos ip camera, neutron ipc2224-sr3-npf-36 firmware, ipc2624-sr3-npf-36 firmware +15 more +17 more Path Traversal in Neutron IP Camera 7.5 High
- cisco sd-wan, sd-wan solution, sd-wan vbond orchestrator +2 more +4 more Cisco SD-WAN Software Privilege Escalation Vulnerabilities 7.8 High
- cisco sd-wan, catalyst sd-wan manager, catalyst sd-wan +5 more +7 more Cisco SD-WAN Software Privilege Escalation Vulnerability 7.8 High
- aviatrix controller An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a... 9.8 Critical