CWE-22

High likelihood

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

9,161 vulnerabilities with CWE-22
CVE-2024-23772 MEDIUM
Quest KACE Agent for Windows <13.1.23.0 - File Create
CVSS 6.6
CVE-2024-33350 CRITICAL
TaoCMS 3.0.2 - Path Traversal and Arbitrary File Write via file.php Component
CVSS 9.8
CVE-2024-31801 HIGH
NEXSYS-ONE < Rev.15320 - Path Traversal
CVSS 7.5
CVE-2024-3195 MEDIUM
MailCleaner <2023.03.14 - Path Traversal
CVSS 4.7
CVE-2024-4297 MEDIUM
HGiga iSherlock 4.5-4.5-147 - Authenticated Path Traversal via System Configuration Interface
CVSS 4.9
CVE-2024-4296 MEDIUM
HGiga iSherlock 4.5-4.5-149 - Authenticated Path Traversal via Account Management Interface
CVSS 4.9
CVE-2024-3034 LOW
BackUpWordPress <3.13 - Path Traversal
CVSS 2.7
CVE-2024-2434 HIGH
GitLab CE/EE <16.9.6-16.11.1 - Path Traversal
CVSS 8.5
CVE-2024-28977 LOW
Dell Repository Manager 3.4.2-3.4.4 - Path Traversal in Logger Module
CVSS 3.3
CVE-2024-28976 HIGH
Dell Repository Manager < 3.4.5 - Path Traversal in API Module
CVSS 8.8
CVE-2024-32869 MEDIUM
Hono < 4.2.7 - Path Traversal via serveStatic in Deno
CVSS 5.3
CVE-2024-32258 HIGH
fceux 2.7.0 - Unauthenticated Path Traversal and Arbitrary File Write via Fake ROM
CVSS 8.8
CVE-2024-32399 HIGH
RaidenMAILD Mail Server <4.9.4 - Path Traversal
CVSS 7.6
CVE-2024-31450 LOW
owncast < 0.1.3 - Authenticated Path Traversal via Emoji Delete Endpoint
CVSS 2.7
CVE-2024-31552 HIGH
CuteHttpFileServer <3.1 - Info Disclosure
CVSS 7.1
CVE-2024-31587 MEDIUM
SecuSTATION Camera <V2.5.5.3116-S50-SMA-B20160811A - Info Disclosure
CVSS 6.5
CVE-2024-27984 HIGH
Ivanti Avalanche < 6.4.3 - Authenticated Path Traversal and Denial of Service
CVSS 7.1
CVE-2024-27977 HIGH
Ivanti Avalanche < 6.4.3 - Authenticated Path Traversal and Arbitrary File Deletion
CVSS 8.1
CVE-2024-27976 HIGH
Ivanti Avalanche < 6.4.3 - Authenticated Path Traversal and Remote Code Execution
CVSS 8.8
CVE-2024-25000 HIGH
Ivanti Avalanche <6.4.3 - Path Traversal
CVSS 8.8
CVE-2024-24999 HIGH
Ivanti Avalanche <6.4.3 - Path Traversal
CVSS 8.8
CVE-2024-24997 HIGH
Ivanti Avalanche <6.4.3 - Path Traversal
CVSS 8.8
CVE-2024-24994 HIGH
Ivanti Avalanche <6.4.3 - Path Traversal
CVSS 8.8
CVE-2024-24992 HIGH
Ivanti Avalanche <6.4.3 - Path Traversal
CVSS 8.8
CVE-2024-23535 HIGH
Ivanti Avalanche < 6.4.3 - Authenticated Path Traversal and Remote Code Execution
CVSS 8.8
Details
Vulnerabilities 9,161
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits