CWE-73: External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- wwbn avideoWWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php9.3 Critical
- passmark software burnintest, osforensics, performancetest +2 morePassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL8.5 High
- passmark software burnintest, osforensics, performancetest +2 morePassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL8.4 High
- datalab-to suryasurya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server8.7 High
- datalab-to markermarker through 2.0.0 Path Traversal via upload filename8.8 High
- xorbits inferenceXinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register8.7 High
- getgrav gravGrav Admin Plugin Path Traversal via Save As Language Code7.1 High
- unknown wpvivid — backup, migration & stagingWPvivid Backup & Migration < 0.9.134 - Admin+ Arbitrary File Deletion via Path Traversal5.5 Medium
- shabti frontend admin by dynamiappsFrontend Admin by DynamiApps < 3.29.13 - Unauthenticated .htaccess and index.php Deletion via Custom Directory Path Traversal5.9 Medium
- No product listedAn arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB...7.2 High
- openlistteam openlistOpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool6.5 Medium
- dbgateDbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid8.7 High
- wwbn avideoAVideo through c91b5975d CSRF and Path Traversal via stopLive.php7.2 High
- wwbn avideoWWBN AVideo Unauthenticated Arbitrary Log File Deletion6.9 Medium
- spartnernl laravel-excelLaravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path7.5 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX7.3 High
- arubanetworks fabric composerAuthenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API7.2 High
- arubanetworks fabric composerAuthenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric Composer7.2 High
pnpmnpmpnpm: pacquet trust-lockfile install can create dependency symlinks outside the project7.1 High- pnpmpnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install7.5 High
- browser-use web-uibrowser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation6.9 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.5 Medium
- unknown shared-files-proShared Files < 1.7.70 - Unauthenticated Arbitrary File Read7.5 High
- unknown shared files, shared-files-pro +1 moreShared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal6.8 Medium
- triliumnext triliumTrilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature8.1 High
- nltkNLTK before 3.10.3 Hardlink File Overwrite via downloader6.9 Medium
- nltkNLTK through 3.10.3 Path Traversal via Model-Artifact APIs8.3 High
- eclipse foundation sw360In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipu…6.0 Medium
- unknown workeeraWorkeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass Assignment9.6 Critical
- calcprogrammer1 openrgbOpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings9.3 Critical
- teamviewer full client, host, quicksupport & portable, full client, host, quicksupport & portable (for windows 7 & 8), full client, host, quicksupport & portable (v13 for windows) +5 more +7 moreImproper Validation of File Paths in TeamViewer Desktop Clients7.5 High
- railmedia order tip for woocommerceOrder Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbitrary File Deletion via delete_exported_csv_file_ajax8.7 High
- calcprogrammer1 openrgbArbitrary file overwrite and deletion local and remote in OpenRGB8.8 High
- baptistearno typebot.ioTypeBot: Arbitrary server file read via Send Email block attachment path8.7 High
- ruvnet sublinear-time-solversublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state7.1 High
- kaltura html5 video player, html5lib libraryCVE-2026-199137.5 High
- nltkNLTK 3.10.2 Path Traversal via corpus-reader constructors8.8 High
- mervinpraison praisonaiPraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location7.1 High
- typo3 extension "mask"Path Traversal in extension "Mask" (mask)6.0 Medium
- gitpython-developers gitpythonGitPython before 3.1.59 Arbitrary File Read via TagReference.create7.1 High
- gitpython-developers gitpythonGitPython before 3.1.59 Path Traversal via separate-git-dir8.7 High
- gitpython-developers gitpythonGitPython before 3.1.59 Local File Content Disclosure via .gitmodules8.6 High
- vrana adminerAdminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection9.3 Critical
- vrana adminerAdminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write5.3 Medium
- exceljsexceljs through 4.4.0 Path Traversal via Unvalidated addImage filename8.7 High
- nltkNLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers8.2 High
- runatlantis atlantisAtlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation8.1 High
- lxc incusArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root9.9 Critical
- datiphy inc. data management centerDatiphy Data Management Center - External Control of File Name or Path9.3 Critical
@nocobase/servernpmNocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code executionNo score- Show moreLoading…