CWE-73: External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- gitpython-developers gitpythonGitPython before 3.1.57 Arbitrary File Read via Repo.archive()7.1 High
- gitpython-developers gitpythonGitPython before 3.1.57 Arbitrary File Overwrite and Read7.2 High
- cybertimon rapidrawRapidRAW < 1.6.0 NTLMv2 Credential Leak via UNC Path in lutPath7.1 High
- apache kyuubiApache Kyuubi: REST batch multipart upload path traversal allows controlled file write9.8 Critical
- brainstorm force ultimate addons for wpbakery page builderUltimate Addons for WPBakery Page Builder < 3.21.4 - Unauthenticated Custom Icon Font Deletion via delete-bsf-fonts6.5 Medium
- flytohub flyto-coreFlyto2 Core: Arbitrary file write via image.download (and other file-writing modules)10.0 Critical
- gnu bisonArbitrary Output Location Change in GNU Bison4.6 Medium
- asseco procertum smartsignArbitrary Path Execution via CPS URI in proCertum SmartSign4.6 Medium
org.openidentityplatform.opendj:opendj-dsml-servletMavenOpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway9.4 Critical- getgrav gravGrav API Plugin before 1.0.10 Path Traversal via move7.1 High
- n8nn8n before 1.123.67 Arbitrary File Write via Edit Image Node7.7 High
- servereye gmbh windows agent (sensorhub)Local Privilege Escalation in servereye client (sensorhub)8.8 High
- gitea open source git serverLocal File Inclusion via file:// URI in Migration Restore4.4 Medium
- progress sharefile storage zones controllerPath traversal in Progress ShareFile Storage Zones Controller (SZC)8.7 High
- apache mina sshdApache MINA SSHD: Path traversal in SCP file reception7.5 High
- sangoma switchvox smb editionAuthenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal7.1 High
- manyfold3d manyfoldManyfold: Authenticated Path Traversal via File Rename7.1 High
- unknown funnelkitFunnelKit < 3.15.0.6 - Admin+ Arbitrary File Deletion via Path Traversal in Template Importer5.5 Medium
- nvm-sh nvmnvm path traversal via a malicious mirror's LTS codename writes outside the alias directory2.1 Low
- metabaseMetabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write10.0 Critical
- getgrav gravGrav before 9.1.8 Arbitrary File Write via Twig-Processed Filename7.2 High
- asus aura wallpaper serviceImproper Restriction of Communication Channel to Intended Endpoints and External Control of File...8.5 High
- julien040 anyqueryAnyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode7.5 High
- eat-pray-ai yutuyutu: Arbitrary File Write via MCP `caption-download` Tool7.7 High
- julien040 anyqueryAnyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode9.1 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Spoofing Vulnerability6.5 Medium
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +12 more +14 moreMicrosoft SQL Server Elevation of Privilege Vulnerability8.8 High
- snowflake sqlalchemyMultiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy8.3 High
- eclipse foundation basyx - java server sdkIn Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments...9.0 Critical
- zereight mcp-gitlabmcp-gitlab Path Traversal via job_id Parameter9.2 Critical
- thales cert suspiciousRemote Code Execution vulnerability in "Suspicious" application9.2 Critical
- sourcecodester online book store systemSourceCodester Online Book Store System Administrative index.php php file inclusion5.3 Medium
- autonomy openplcOpenPLC v3 External Control of File Name or Path8.7 High
- sooperset mcp-atlassianMCP Atlassian: Arbitrary server-side file read via attachment upload7.7 High
- coturnCoturn: Arbitrary File Write via CLI psd Command6.0 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS...8.8 High
- mervinpraison praisonaiPraisonAI before 1.6.78 Path Traversal via config.toml6.9 Medium
- psd-toolspsd-tools: arbitrary file write via smart-object filename4.6 Medium
- conda py-rattler, rattler cache +1 moreRattler vulnerable to package cache path traversal via conda package build string5.4 Medium
phantom-audioPyPIPhantom: Arbitrary file write and decode-bomb DoS via unconfined MCP tool paths7.7 High- appium, appium appium\/storage-plugin +1 moreAppium: Unauthenticated arbitrary file/directory deletion in @appium/storage-plugin8.6 High
- composiohq composioComposio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts8.9 High
- berriai litellmLiteLLM: Local file read via request-supplied OIDC file references2.1 Low
- oasdiffoasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)6.0 Medium
- mohammed kaludi amp for wp – accelerated mobile pagesAMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload7.5 High
egroupware/egroupwarePackagistEGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose6.5 Medium- fossbillingFOSSBilling: Downloadable product files can be overwritten through filename collisions5.1 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.1 High
- asus business managerExternal Control of File Name or Path vulnerability in ASUS Business Manager allows a local user...8.5 High
- Show moreLoading…