CWE-36: Absolute Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory.
A kind of CWE-22 Path traversal.
From the CWE List. © The MITRE Corporation.
Newest
- chunghwa telecom tbm-clientChunghwa Telecom tbm-client - Arbitrary File Copy and Paste7.1 High
- chunghwa telecom tbm-clientChunghwa Telecom tbm-client - Arbitrary File Delete8.1 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreAbsolute Path Traversal9.3 Critical
- interinfo dreammakerInterinfo DreamMaker - Arbitrary File Reading through Path Traversal7.5 High
- changing information technology idexpertCHANGING Information Technology IDExpert - Arbitrary File Read through Path Traversal4.9 Medium
- openrefine butterfly, simile-butterfly, similie butterfly +2 moreButterfly has path/URL confusion in resource handling leading to multiple weaknesses9.1 Critical
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center ...6.5 Medium
- hgiga oakloudsHgiga OAKlouds - Arbitrary File Read And Delete9.8 Critical
- phpoffice phpspreadsheetPath traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheet6.3 Medium
- phpoffice phpspreadsheetPath traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheet7.7 High
- franklin fueling systems ts-550 evo, franklinfueling ts-550 evo firmware +1 moreFranklin Fueling Systems TS-550 EVO Absolute Path Traversal8.7 High
- syscomgo omflowThe SYSCOM Group OMFLOW - Arbitrary File Read6.5 Medium
- digiwin easyflow .netDigiwin EasyFlow .NET - Arbitrary File Download6.5 Medium
- italtel i-mcs nfvAn issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers...7.5 High
- cisco secure email, secure email gateway +1 moreA vulnerability in the content scanning and message filtering features of Cisco Secure Email...9.8 Critical
- parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 moreAbsolute Path Traversal in parisneo/lollms-webui7.5 High
- fujitsu id link manager, fsas technologies inc. fujitsu business application id link manager ii, fujitsu software id link manager +3 more +5 moreAbsolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR...8.6 High
- lollms, parisneo parisneo/lollms +1 morePath Traversal in parisneo/lollms7.5 High
- parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 morePath Traversal in parisneo/lollms-webui7.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webui9.1 Critical
- motorola firmware, phones +1 moreAn improper absolute path traversal vulnerability was reported for the Ready For application...6.5 Medium
- microsoft defender for iotMicrosoft Defender for IoT Remote Code Execution Vulnerability8.8 High
- microsoft defender for iotMicrosoft Defender for IoT Remote Code Execution Vulnerability8.8 High
- crmebZhongBangKeJi CRMEB openfile absolute path traversal3.5 Low
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure2.4 Low
- honeywell controledge uoc, controledge unit operations controller firmware, controledge virtual unit operations controller firmware +2 moreAn attacker could potentially exploit this vulnerability, leading to files being read from the...5.3 Medium
- palantir com.palantir.gotham:blackbird-witchcraft, gotham blackbird-witchcraft, gotham static-assets-servlet +2 moreGotham table and Forward App Path traversal6.5 Medium
- redhat ansible automation platform, debian linux, red hat ansible automation platform 1.2 +6 more +8 moreAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files6.3 Medium
- microsoft skype for business server 2015 cu13, skype for business server 2019 cu7, skype for business server +2 moreSkype for Business Remote Code Execution Vulnerability7.2 High
- dedecmsDedeCMS select_templets_post.php absolute path traversal5.5 Medium
- splunk, splunk enterprise, cloud +1 more +3 moreAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py7.8 High
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx absolute path traversal4.3 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreAbsolute Path Traversal in mlflow/mlflow10.0 Critical
- iagona scrutiswebIagona ScrutisWeb Absolute Path Traversal7.5 High
- sonicwall analytics, gms, global management system +2 morePath Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated...6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreVolume Shadow Copy Elevation of Privilege Vulnerability7.3 High
- jinher oa, weaver e-office +1 moreWeaver OA downfile.php absolute path traversal4.3 Medium
- moxi624 mogu blog v2, mogublog project mogublog +1 moremoxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal4.3 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreAbsolute Path Traversal in mlflow/mlflow5.3 Medium
- cisco broadworks commpilot application, broadworks +1 moreA vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application...8.3 High
- cisco unified communications manager, unified communications manager im and presence service +1 moreCisco Unified Communications Products Arbitrary File Read Vulnerability6.5 Medium
- fluxcd flux2, kustomize-controller +1 moreImproper path handling in kustomization files allows path traversal9.9 Critical
- clinical-genomics clinical-genomics/scout, scout +1 morePath Traversal due to `send_file` call in clinical-genomics/scout6.8 Medium
- cisco ip phones with multiplatform firmware, ip conference phone 7832 firmware, ip conference phone 8832 firmware +14 more +16 moreCisco IP Phone Software Arbitrary File Read Vulnerability5.5 Medium
- cisco intersight virtual applianceCisco Intersight Virtual Appliance Vulnerabilities6.5 Medium
- cisco intersight virtual applianceCisco Intersight Virtual Appliance Vulnerabilities6.5 Medium
- dell wyse management suiteWyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability....8.1 High
- dell storage managerQSAN Storage Manager - Absolute Path Traversal via FileDownload function6.5 Medium
- dell storage managerQSAN Storage Manager - Absolute Path Traversal via GetImage function6.5 Medium
- jun-he technology ltd. quan-fang-wei-tong-xun system, junhetec omnidirectional communication system +1 moreJun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion6.5 Medium
- Show moreLoading…