CWE-73: External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- red hat openshift container platform 4, openshift container platform 5 +1 moreKata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy8.1 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.1 Critical
- ibm ds8900f (r9.4), ds8900f firmware, ds8a00 (r10.0 - r10.1) +1 more +3 moreDS8900F and DS8A00 Information Disclosure5.4 Medium
claude-faf-mcpnpmclaude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools7.5 Highfaf-mcpnpmfaf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools7.5 Highgrok-faf-mcpnpmgrok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools7.5 High- wazuhWazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager9.1 Critical
- cisco crosswork planningCisco Crosswork Security Hardening Release: August 202610.0 Critical
- wazuhWazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager9.1 Critical
- sgoudelis ground-stationGround Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution9.8 Critical
- phpmyfaqphpMyFAQ before v4.1.6 Local File Disclosure via PDF Export7.1 High
- truelockmc streambertStreambert: Arbitrary Directory Creation and File Manipulation via Backup Handler8.4 High
- truelockmc streambertStreambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol8.8 High
- hmbown codewhaleCodeWhale before 0.8.64 Argument Injection via git_show8.5 High
- citrix workspace appCitrix Workspace App for Mac Security Bulletin for CVE-2026-187515.2 Medium
- getgrav gravgrav-plugin-api before 1.0.15 Path Traversal via batchCopy7.1 High
- No product listedAn issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app...8.8 High
- cliuniget: Path Traversal in Hook Files - Directory Escape Vulnerability8.4 High
- progress sharefile storage zones controllerPath traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller7.2 High
- progress sharefile storage zones controllerArbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution7.2 High
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Path Traversal via plugin_id8.7 High
- johnson controls airwallAirwall - Arbitrary file read7.0 High
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities9.8 Critical
- openwrt luciOpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass9.4 Critical
- openwrt luciluci-app-openvpn Path Traversal RCE via instance_name29.4 Critical
- ibm documentation offlineIBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution9.8 Critical
- ibm iIBM i is Affected By An Improper Validation Vulnerability in PASE []8.8 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in Network Authentication Service7.8 High
- mithaldu pdf::webkitPDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for6.1 Medium
- progress whatsup goldWhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.9.8 Critical
- progress whatsup goldWhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.6.8 Medium
- sshnet ssh.netSSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames7.1 High
- opajaap wp photo album plusWP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal7.5 High
- stanford nlp dspyDSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing9.2 Critical
- ivanti endpoint managerExternal control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7...7.7 High
- No product listedDedeCMS Installation Wizard index.php _4_Setup file inclusion2.3 Low
- opajaap wp photo album plusWP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips5.3 Medium
- gitpython-developers gitpythonGitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name8.4 High
- gitpython-developers gitpythonGitPython before 3.1.58 Arbitrary File Read via pathspec-from-file7.1 High
- tobit laboratories ag teamdavidTeamDavid: Local File Inclusion via the form field 'scjob'8.4 High
- tobit laboratories ag teamdavidTeamDavid: Arbitrary File Deletion via form field 'scjob'8.4 High
- No product listedTinyAGI agents.ts buildSystemPrompt file inclusion6.9 Medium
- No product listedTinyAGI Message API Endpoint response.ts collectFiles file inclusion6.9 Medium
- glenwpcoder drag and drop multiple file upload for woocommerceDrag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle9.1 Critical
- eclipse theia, the eclipse foundation eclipse theia +1 moreIn Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST...8.8 High
flowisenpm,flowise-componentsnpm +1 moreFlowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys7.2 High- djangoproject djangoServer-side file-write and request forgery via spatial lookups8.7 High
- tubitak bilgem software technologies research institute pardus-image-writerArbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer7.1 High
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Edge for Android Information Disclosure Vulnerability7.4 High
- microsoft edge, edge for android +1 moreMicrosoft Edge for Android Information Disclosure Vulnerability7.7 High
- Show moreLoading…