CWE-22

High likelihood

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

9,161 vulnerabilities with CWE-22
CVE-2024-22415 HIGH
jupyter-lsp < 2.2.2 - Unauthenticated Improper Access Control
CVSS 7.3
CVE-2024-0354 MEDIUM
unknown-o Download Station <=1.1.8 - Path Traversal
CVSS 5.3
CVE-2024-0341 LOW
inis_project/inis < 2.0.1 - Path Traversal via GET Request Handler
CVSS 3.5
CVE-2024-22050 HIGH
Iodine < 0.7.33 - Unauthenticated Path Traversal via Static File Service
CVSS 7.5
CVE-2024-20805 LOW
MyFiles <SMR Jan-2024 Release 1 - Path Traversal
CVSS 3.3
CVE-2024-20804 MEDIUM
MyFiles <SMR Jan-2024 Release 1 - Path Traversal
CVSS 4.0
CVE-2024-21633 HIGH
apktool < 2.9.2 - Path Traversal via Resource File Output Path Manipulation
CVSS 7.8
CVE-2023-7335 HIGH
EduSoho < 22.4.7 - Unauthenticated Arbitrary File Read via Classroom-Course-Statistics Export
CVE-2023-53979 HIGH
MyBB 1.8.32 - Authenticated Remote Code Execution via Chained Avatar Upload and Language Configuration
CVSS 8.8
CVE-2023-53962 HIGH
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Path Traversal
CVSS 7.5
CVE-2023-53944 MEDIUM
EasyPHP Webserver 14.1 - Path Traversal
CVSS 6.5
CVE-2023-53907 MEDIUM
Bludit <3.13.1 - Authenticated File Download
CVSS 6.5
CVE-2023-53902 MEDIUM
WebsiteBaker 2.13.3 - Path Traversal
CVSS 6.5
CVE-2023-53772 HIGH
MiniDVBLinux 5.4 - Arbitrary File Read via About Page File Parameter
CVSS 7.5
CVE-2023-7327 HIGH
Ozeki SMS Gateway <=10.3.208 - Path Traversal
CVE-2023-7309 CRITICAL
Dahua Smart Park Integrated Management Platform - Path Traversal
CVE-2023-39339 MEDIUM
Ivanti Policy Secure < 22.6R1 - Authenticated Arbitrary File Read via Path Traversal
CVSS 4.9
CVE-2023-51232 HIGH
Dagster < 1.5.11 - Directory Traversal via /logs Endpoint
CVSS 7.5
CVE-2023-42961 MEDIUM
iPadOS < 16.7 - Sandbox Restriction Bypass via Path Handling Issue
CVSS 6.3
CVE-2023-46988 MEDIUM
ONLYOFFICE Document Server <8.0.1 - Path Traversal
CVSS 6.7
CVE-2023-0092 MEDIUM
juju 2.9.22-2.9.38 - Authenticated Path Traversal
CVSS 4.9
CVE-2023-38012 MEDIUM
IBM Cloud Pak System 2.3.3.6-2.3.4.0 - Path Traversal via URL Request
CVSS 5.3
CVE-2023-42232 HIGH
HelpdeskAdvanced <= 11.0.33 - Path Traversal via Navigator/Index Function
CVSS 7.5
CVE-2023-42229 MEDIUM
HelpdeskAdvanced <= 11.0.33 - Authenticated Path Traversal via WSConnector SOAP Requests
CVSS 6.5
CVE-2023-42227 HIGH
HelpdeskAdvanced <= 11.0.33 - Path Traversal via WSCView/Save Function
CVSS 7.5
Details
Vulnerabilities 9,161
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits