CWE-73: External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL6.9 Medium
- opnsense coreOPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer9.9 Critical
- gitpython-developers gitpythonGitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name8.7 High
- shd101wyy vscode-markdown-preview-enhancedMarkdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation5.8 Medium
- nasa fprimeF´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath7.1 High
- unknown file upload to orderFile Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion10.0 Critical
- curl-J no-clobber guarantee bypassed with 103 early hints7.5 High
- onlyoffice document serverA remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows...8.7 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreWindows Update Elevation of Privilege Vulnerability7.8 High
- ivanti xtractionAn External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4...9.9 Critical
- metabaseMetabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions9.3 Critical
- nltkNLTK through 3.10.3 Path Traversal via WekaClassifier Model Path8.3 High
- elated-themes frappeFrappe Framework before v16.30.0 Arbitrary File Read via Outgoing Email HTML8.2 High
- c4illin convertxConvertX: Path Traversal vulnerability leading to Arbitrary File Write8.1 High
- progress sharefile storage zones controllerArbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService7.4 High
- c4illin convertxConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter7.1 High
- innocommerce innoshopInnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool5.9 Medium
- netease-youdao lobsteraiLobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.json6.9 Medium
- datamodel-code-generatordatamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreAn arbitrary file manipulation vulnerability exists in the WebTools management interface of...8.4 High
- @backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 moreBackstage: Improper input validation in Confluence to Markdown scaffolder module6.3 Medium
- @backstage backend-defaults, backstage, linuxfoundation backstage\/backend defaults +2 moreBackstage: Improper input validation in cloud storage URL readers4.4 Medium
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent6.7 Medium
- @quasar app-vite, quasarframework quasar +1 moreQuasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories4.1 Medium
- @quasar icongenie, quasarframework quasar +1 moreQuasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile7.1 High
- payloadcms payloadPayload: Incomplete validation during the upload file lifecycle8.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading...6.5 Medium
- docling, docling-project docling-slim +1 moreDocling: Crafted DoclingDocument JSON embeds local image files into converted output4.3 Medium
- docling, docling-project docling-slim +1 moreDocling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine7.5 High
- eclipse foundation che, the eclipse foundation eclipse che +1 moreIn Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory...8.4 High
- perforce p4 (helix core)Arbitrary file-write via extension installation in P4Search5.1 Medium
- mitel mivoice office 400Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution8.4 High
- perforce p4 (helix core)Arbitrary file-write via log configuration path in P4Search7.5 High
- mitel mivoice office 400Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution8.5 High
- nrwl nxNx: Path traversal in nx migrate package-migrations extraction5.8 Medium
- tryghost ghostGhost: Path Traversal via Locale Setting4.9 Medium
- tryghost ghostGhost 1.20.0 before 6.64.0 Path Traversal via Locale Setting6.9 Medium
- johnson controls easyio fs32- External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows -...5.6 Medium
- aws security-agent-mcp-serverArgument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace6.9 Medium
- n8n-io n8nn8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase7.1 High
- webrehab super forms – drag & drop form builderSuper Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter8.1 High
- unknown cache enablerCache Enabler < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion via cache_enabler_clear_page_cache_by_url8.7 High
- unknown backupsheep wordpress backup pluginBackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key10.0 Critical
- asyncfuncai deepwiki-openDeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file8.7 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Privilege Escalation through External Control of File Name or Path6.7 Medium
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection6.5 Medium
- liquid-co opensaveOpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path8.6 High
- cato networks sdp clientCato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation6.8 Medium
- cato networks sdp clientCato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation8.5 High
- exactly www ewww image optimizerEWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler4.4 Medium
- Show moreLoading…