CWE-73: External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- balbooa forms, balbooa.com balbooa forms extension for joomla +1 moreJoomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.46.9 Medium
- mypresta google merchant center feedUnauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module9.3 Critical
- sangoma freepbx, freepbx security-reporting +1 moreFreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module8.7 High
- gitpython-developers gitpythonGitPython before 3.1.62 Path Traversal via gitmodules path8.7 High
- siyuan-note siyuanSiYuan before v3.8.4 Path Traversal via setNotebookIcon8.3 High
- siyuan-note siyuanSiYuan before v3.8.4 Path Traversal via checkoutRepo sessionID8.3 High
- honeywell pd45 industrial printerAuthenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface8.8 High
- plex media serverPlex Media Server arbitrary file write8.6 High
- streamlinkStreamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files6.5 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability7.8 High
- mcp-atlassian mcp atlassian, sooperset mcp-atlassian +1 moreMCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters8.3 High
- netdataNetdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE8.4 High
- vectordotdev vectorVector: Arbitrary file write in the file sink via templated path (path traversal).9.3 Critical
- nvidia infrastructure controller, infra controller +1 moreNVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause...6.6 Medium
- roomi-fields notebooklm-mcp@roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory7.1 High
- condaConda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation8.8 High
- midnightbsd mportmport trusts environment-controlled temporary directories in privileged metadata extraction5.3 Medium
- mispMISP Arbitrary Local File Read and SSRF via MISP Export Upload8.3 High
- vanderbilt redcapAn unauthenticated Remote Code Execution vulnerability was found in the survey passthrough...9.8 Critical
- rclonerclone serve docker Path Traversal via Volume Name4.6 Medium
- jetmonsters jetformbuilder — dynamic blocks form builderJetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback5.5 Medium
- synology diskstation manager (dsm)An external control of file name or path vulnerability in Upload API in Synology DiskStation...8.1 High
- midnightbsd mportmport package installation can overwrite existing unmanaged or differently owned files6.0 Medium
- midnightbsd mportmport package bundle downloads allow unsafe destination filenames8.3 High
- redocly redocly-cliRedocly CLI: Path traversal when using `split` command4.4 Medium
- advantech eki-1242eims, eki-1242ieims +1 moreNozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in...8.6 High
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal6.5 Medium
- newell brands dymo connect desktopNewell Brands DYMO Connect Desktop improper file path validation5.1 Medium
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software9.9 Critical
- asyncfuncai deepwiki-openDeepWiki-Open through commit d92819a Arbitrary File Read via /ws/chat WebSocket8.7 High
- laradashboardLaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE8.6 High
- unknown webtotem backupsWebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal9.6 Critical
- unknown code monkeys proposalsCode Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal9.6 Critical
mistralrs-server-corecrates.iomistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url7.2 High- knowns-dev knownsknowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header9.3 Critical
- grokability snipe-itSnipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown8.4 High
- grokability snipe-itSnipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA8.4 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.3 High
- siyuan-note siyuanSiYuan before v3.8.2 Path Traversal via removeRiffDeck8.4 High
- opnsense corentp: write path traversal9.0 Critical
@typespec/compilernpm,@typespec/openapi3npm +1 moreOpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree7.1 High- n8nn8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read5.3 Medium
- nodemailerNodemailer before 9.1.1 Security Sandbox Bypass via resolveContent6.0 Medium
- okta access gatewayImproper Path Validation in Okta Access Gateway Kerberos Configuration Handling5.9 Medium
- microsoft skype for business server 2015 cu13, skype for business server 2019 cu8, skype for business server subscription edition cu1 +2 more +4 moreSkype for Business Remote Code Execution Vulnerability9.8 Critical
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +5 more +7 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.9, microsoft.diagnostics.runtime +2 more +4 more.NET Elevation of Privilege Vulnerability7.5 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows Shell Elevation of Privilege Vulnerability7.0 High
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.8 High
- openvpnThe Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users...5.6 Medium
- Show moreLoading…