CWE-35: Path Traversal: '.../...//'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.
A kind of CWE-23 Relative Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- cisco unified communications manager, unified communications manager im and presence service +1 moreCisco Unified Communications Products Vulnerabilities6.5 Medium
- cisco security managerCisco Security Manager Path Traversal Vulnerability9.1 Critical
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionid8.7 High
- hackerone html-pages node module, html-pages project html-pages +1 morePath Traversal in html-pages9.8 Critical