CWE-28: Path Traversal: '..\filedir'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "..\" sequences that can resolve to a location that is outside of that directory.
A kind of CWE-23 Relative Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... 6.0 Medium
- apple ios, ipados, macos +5 more +7 more A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and... 5.5 Medium
- dedecms DedeCMS select_templets.php path traversal 4.3 Medium