CWE-36: Absolute Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory.
A kind of CWE-22 Path traversal.
From the CWE List. © The MITRE Corporation.
Newest
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Arbitrary File Write Vulnerabilities7.5 High
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Arbitrary File Write Vulnerabilities7.5 High
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.61, There is path traversal vulnerability when...7.8 High
- advantech webaccessAn Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The...7.1 High