CWE-29: Path Traversal: '\..\filename'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.
A kind of CWE-23 Relative Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- sonicwall netextender A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows... 8.8 High
- red hat advanced cluster management for kubernetes 2, build of keycloak, enterprise linux 8 +1 more +3 more decompress: Arbitrary File Write via Archive Extraction (Zip Slip) 6.1 Medium
- nvidia bionemo framework NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal... 8.8 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 more Path Traversal in mintplex-labs/anything-llm 9.1 Critical
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Path Traversal Vulnerability in mlflow/mlflow 9.6 Critical
- ellite wallos Wallos: SSRF via url parameter leading to File Traversal 8.7 High
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 more A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This... 8.7 High
- parisneo parisneo/lollms-webui Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui 9.6 Critical
- nicholas j humfrey ruby-mqtt, red hat satellite 6 +1 more Rubygem-mqtt: rubygem-mqtt hostname validation 7.4 High
- huawei harmonyos Denial of service (DoS) vulnerability in the office service. Successful exploitation of this... 3.3 Low
- dbgate DbGate allows Unauthorized File Access via CSV Plugin 7.0 High
- dbgate DbGate allows for File Traversal via file parameter 7.1 High
- llamaindex, run-llama run-llama/llama index +1 more Arbitrary File Read through Path Traversal in run-llama/llama_index 7.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 more Path Traversal in mintplex-labs/anything-llm 7.2 High
- aimhubio aimhubio/aim, aimstack aim +1 more Arbitrary File Deletion via Relative Path Traversal in aimhubio/aim 9.1 Critical
- gradio-app gradio-app/gradio, gradio project gradio +1 more Path Traversal in gradio-app/gradio 8.2 High
- modelscope agentscope, modelscope/agentscope +1 more Path Traversal in modelscope/agentscope 9.1 Critical
- binary-husky binary-husky/gpt academic, gpt academic +1 more Path Traversal in binary-husky/gpt_academic 8.8 High
- bentoml bentoml/openllm Local File Inclusion in bentoml/openllm 6.2 Medium
- danswer-ai danswer-ai/danswer Arbitrary File Overwrite in danswer-ai/danswer 9.1 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 more Path Traversal in mlflow/mlflow 7.5 High
- danny-avila danny-avila/librechat, librechat +1 more Path Traversal in danny-avila/librechat 8.8 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 more Path Traversal in mintplex-labs/anything-llm 7.2 High
- dell powerprotect dd, data domain operating system +1 more Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path... 7.1 High
-
luigiPyPI luigi Arbitrary File Write via Archive Extraction (Zip Slip) 7.7 High - langchain-ai langchain-ai/langchainjs, langchain langchain.js, langchain-ai langchain-ai\/langchainjs +2 more Path Traversal in langchain-ai/langchainjs 6.5 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt, gaizhenbiao\/chuanhuchatgpt +2 more Arbitrary File Read via Insufficient Validation in gaizhenbiao/chuanhuchatgpt 7.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Local File Inclusion in parisneo/lollms-webui 7.5 High
- aimhubio aim, aimhubio/aim +1 more Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim 9.8 Critical
- stitionai devika, stitionai/devika +1 more Path Traversal in stitionai/devika 9.1 Critical
- parisneo parisneo/lollms, lollms-webui +1 more Path Traversal in parisneo/lollms 7.3 High
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 more Path Traversal in parisneo/lollms-webui 4.0 Medium
- parisneo lollms, parisneo/lollms +1 more Remote Code Execution via Path Traversal in parisneo/lollms 9.8 Critical
- opencart Zip slip in opencart 7.2 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 more Path Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llm 9.1 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal leading to Remote Code Execution in parisneo/lollms-webui 9.8 Critical
- lollms, parisneo parisneo/lollms, lollms-webui +2 more Path Traversal in parisneo/lollms 9.8 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 more Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow 7.5 High
- parisneo lollms, parisneo/lollms-webui, lollms web ui +2 more Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui 9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui 9.4 Critical
- deepjavalibrary deepjavalibrary/djl, djl, djl deep java library +2 more TarSlip Vulnerability in deepjavalibrary/djl 7.8 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal Vulnerability in parisneo/lollms-webui 7.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui 9.6 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal in parisneo/lollms-webui 8.4 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 more Path Traversal Bypass in mlflow/mlflow 7.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 more Path Traversal in parisneo/lollms-webui 7.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal leading to Remote Code Execution in parisneo/lollms-webui 9.8 Critical
- hsc mailinspector An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path... 8.6 High
- zenml, zenml-io zenml-io/zenml +1 more Directory Traversal in zenml-io/zenml 9.9 Critical
- gradio-app gradio-app/gradio, gradio project gradio +1 more Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio 7.5 High
- Show olderLoading…