CWE-73: External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- zinoui http headersHTTP Headers <= 1.19.2 - Authenticated (Administrator+) External Control of File Name or Path to RCE via 'hh_htpasswd_path' and 'hh_www_authenticate_user' Parameters7.2 High
- jupyter nbconvertnbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding6.5 Medium
- jupyter nbconvertnbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames6.5 Medium
- freedom securedrop-clientSecureDrop Client has path injection in read_gzip_header_filename()7.5 High
- openclawOpenClaw 2026.4.7 < 2026.4.15 - Arbitrary File Read via Unvalidated Tool-Result Media Paths6.3 Medium
- firebirdsql firebirdFirebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution10.0 Critical
@paperclipai/sharednpmPaperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath6.5 Medium- jellyfinJellyfin: Potential SSRF + Arbitrary file read via LiveTV M3U tuner8.6 High
- unisys webperfect image suiteUnisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP7.0 High
- tomdever wpforo forumwpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter7.1 High
- nomachineNoMachine External Control of File Path Local Privilege Escalation Vulnerability7.8 High
- nomachineNoMachine External Control of File Path Arbitrary File Deletion Vulnerability7.1 High
- chamilo lms, chamilo-lms +1 morePath Traversal (Arbitrary File Delete) in Chamilo LMS8.3 High
- danielgatis rembgRembg has a Path Traversal via Custom Model Loading5.3 Medium
- openclawOpenClaw < 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA Paths5.9 Medium
github.com/gotenberg/gotenberg/v7Go,github.com/gotenberg/gotenberg/v8Go +1 moreGotenberg has incomplete fix for ExifTool arbitrary file write: case-insensitive bypass and missing HardLink/SymLink tags8.8 High- hitachi job management partner 1/it desktop management - manager, job management partner 1/it desktop management 2 - manager, job management partner 1/software distribution client +11 more +13 moreRemote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM8.8 High
- chyrplite chyrp lite, xenocrat chyrp-lite +1 moreChyrp Lite has a Path Traversal to Remote Code Execution9.1 Critical
- montferret ferretFerret has a Path Traversal in IO::FS::WRITE allows arbitrary file write when scraping malicious websites8.1 High
- sillytavernSillyTavern: Path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory8.1 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260305] - Arbitrary file deletion in com_joomlaupdate8.6 High
- No product listedAn arbitrary file overwrite vulnerability in Docudepot PDF Reader: PDF Viewer APP v1.0.34 allows...8.4 High
- No product listedAn arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5...8.4 High
- tinybeans private family albumAn arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod...8.4 High
- deepthought.industries ace scannerAn arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4...8.4 High
- sourcecodester leave application systemSourceCodester Leave Application System file inclusion6.9 Medium
- basercmsbaserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE7.2 High
- uxgroupllc voice recorderAn arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to...8.6 High
- uxgroupllc cast to tvAn arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77...9.0 Critical
- maru neo.maruAn arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite...9.8 Critical
- deftpdf document translatorAn arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers...9.8 Critical
- tinacms, ssw tinacms\/graphql +1 more@tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files8.1 High
- 0xjacky nginx-ui, nginxui nginx ui +1 moreNginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory6.9 Medium
- mobile-next mobile-mcp, mobilenexthq mobile mcp +1 more@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools8.1 High
- shaneisrael fireshareFireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`7.1 High
- error311 fileriseFileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle8.1 High
- admin-express adminexpressAdminExpress 1.2.5 Denial of Service via System Compare6.9 Medium
- agence web eoxia - montpellier task managerTask Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read6.5 Medium
- b3log siyuanSiYuan has an Unauthenticated Arbitrary File Read via Path Traversal7.5 High
- dataease sqlbotSQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL8.7 High
- wwbn avideoAVideo has an authenticated arbitrary local file read via `chunkFile` path injection in `aVideoEncoder.json.php`7.6 High
- langflowLangflow has an Arbitrary File Write (RCE) via v2 API10.0 Critical
- b3log siyuanSiYuan importSY/importZipMd: Path Traversal via multipart filename enables arbitrary file write7.6 High
- intelbras telefone ip tip 200, telefone ip tip 200 lite +1 moreIntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile8.7 High
- zoom communications workplace, zoom workplace desktop, workplace virtual desktop infrastructure +2 moreExternal Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6...9.6 Critical
- mcp-atlassian mcp atlassian, sooperset mcp-atlassian +1 moreMCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment9.1 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- siemens sicam siapp sdkA vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected...5.9 Medium
- siemens sicam siapp sdkA vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected...8.6 High
- budibaseBudibase PWA ZIP Upload Path Traversal Allows Reading Arbitrary Server Files Including All Environment Secrets9.6 Critical
- Show moreLoading…