CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,220 vulnerabilities with CWE-22
CVE-2023-1467
MEDIUM
SourceCodester Student Study Center Desk Management System 1.0 - Pa...
CVSS 6.5
CVE-2023-21456
CRITICAL
Samsung Android Galaxy Themes Service - Path Traversal
CVSS 9.0
CVE-2023-28105
HIGH
go-huge-util < 0.0.34 - Path Traversal via ZipSlip in fsutil Unzip
CVSS 8.8
CVE-2023-25345
HIGH
swig-templates < 2.0.4 and swig < 1.4.2 - Path Traversal via Include or Extends Tags
CVSS 7.5
CVE-2023-25804
HIGH
Roxy-WI < 6.3.5.0 - Path Traversal via SSH Key Save
CVSS 7.5
CVE-2023-28371
CRITICAL
Stellarium < 1.2 - Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2023-27588
HIGH
Hasura GraphQL Engine < 1.3.4 - Path Traversal
CVSS 7.5
CVE-2023-1398
MEDIUM
XiaoBingBy TeaCMS 2.0 - Path Traversal
CVSS 6.3
CVE-2023-27501
HIGH
SAP NetWeaver AS ABAP and ABAP Platform 700-757, 791 - Path Traversal and Arbitrary File Deletion
CVSS 8.7
CVE-2023-27500
CRITICAL
SAP NetWeaver Application Server ABAP - Authenticated Path Traversal and Arbitrary File Write via SAPRSBRO
CVSS 9.6
CVE-2023-27269
CRITICAL
SAP NetWeaver Application Server for ABAP and ABAP Platform - Path ...
CVSS 9.6
CVE-2023-25803
HIGH
roxy-wi < 6.3.5.0 - Path Traversal and Arbitrary File Read
CVSS 7.5
CVE-2023-25802
HIGH
roxy-wi < 6.3.6.0 - Path Traversal via Directory Traversal Sequences
CVSS 7.5
CVE-2023-27577
MEDIUM
flarum < 1.7.0 - Authenticated Path Traversal via LESS Parser
CVSS 6.6
CVE-2023-25814
HIGH
metersphere < 2.7.1 - Path Traversal via Resource File Submission
CVSS 7.1
CVE-2023-23760
MEDIUM
GitHub Enterprise Server < 3.4.17 - Remote Code Execution via GitHub Pages Site Build
CVSS 4.9
CVE-2023-27475
HIGH
goutil < 0.6.0 - Path Traversal via ZipSlip in fsutil.Unzip
CVSS 8.8
CVE-2023-25304
HIGH
Prism Launcher < 6.1 - Path Traversal via Crafted .mrpack File Import
CVSS 7.8
CVE-2023-1191
MEDIUM
fastcms - Path Traversal in ZIP File Handler
CVSS 4.7
CVE-2023-26111
HIGH
@nubosoftware/node-static - Path Traversal
CVSS 7.5
CVE-2023-22336
CRITICAL
dos-osaka SS1 < 13.0.0.40 and Rakuraku PC Cloud Agent < 2.1.8 - Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2023-1163
MEDIUM
DrayTek Vigor 2960 1.5.1.4/1.5.1.5 - Path Traversal via getSyslogFile Option
CVSS 6.5
CVE-2023-1112
MEDIUM
Drag and Drop Multiple File Upload Contact Form 7 < 5.0.6.3 - Path Traversal via upload_name Parameter
CVSS 4.7
CVE-2023-22776
MEDIUM
ArubaOS 8.6.0.0-8.6.0.18 and SD-WAN 8.7.0.0-2.3.0.0-8.7.0.0-2.3.0.7 - Authenticated Path Traversal
CVSS 4.9
CVE-2023-22774
HIGH
ArubaOS 8.6.0.0-8.6.0.18 and SD-WAN 8.7.0.0-2.3.0.0-8.7.0.0-2.3.0.7 - Authenticated Path Traversal
CVSS 7.2
Details
Vulnerabilities
9,220
Exploit Likelihood
High