CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,220 vulnerabilities with CWE-22
CVE-2022-46255
CRITICAL
GitHub Enterprise Server <3.7.0 - RCE
CVSS 9.8
CVE-2022-23512
HIGH
MeterSphere < 2.4.1 - Path Traversal via ApiTestCaseService
CVSS 7.7
CVE-2022-4494
MEDIUM
mcp_mapping_viewer < 2022-09-22 - Path Traversal in RemoteZipHandler
CVSS 6.3
CVE-2022-4493
MEDIUM
scifio < 0.43.3 - Path Traversal in ZIP File Handler
CVSS 6.3
CVE-2022-34271
HIGH
Apache Atlas 0.8.4-2.2.0 - Authenticated Path Traversal and Arbitrary File Write
CVSS 8.8
CVE-2022-40264
MEDIUM
GENESIS64 10.96-10.97.2 - Unauthenticated Path Traversal via Crafted Project Package Import
CVSS 6.3
CVE-2022-20449
MEDIUM
Android - Path Traversal in UserManagerService
CVSS 4.4
CVE-2022-29580
HIGH
Google Search < 13.41 - Path Traversal via Symbolic Encoded String Bypass
CVSS 8.9
CVE-2022-45269
HIGH
Linx Sphere LINX 7.35.ST15 - Path Traversal in SCS.Web.Server.SPI
CVSS 7.5
CVE-2022-44653
HIGH
Trend Micro Apex One < 14.0.11789 - Local Privilege Escalation via Directory Traversal
CVSS 7.8
CVE-2022-44532
MEDIUM
Aruba EdgeConnect Enterprise < 8.3.7.1 - Authenticated Path Traversal via CLI
CVSS 4.9
CVE-2022-43518
MEDIUM
Aruba EdgeConnect Enterprise <9.2.1.0-8.3.7.1 - Path Traversal
CVSS 4.9
CVE-2022-37906
MEDIUM
ArubaOS 6.5.4.0-6.5.4.21 and SD-WAN 8.7.0.0-2.3.0.0-8.7.0.0-2.3.0.5 - Authenticated Path Traversal
CVSS 6.5
CVE-2022-4402
MEDIUM
docsys < 2.02.37 - Path Traversal via ZIP File Decompression Handler
CVSS 4.7
CVE-2022-45290
CRITICAL
kbase_doc v1.0 - Arbitrary File Deletion via IndexController
CVSS 9.1
CVE-2022-46826
MEDIUM
JetBrains IntelliJ IDEA <2022.3 - Path Traversal
CVSS 6.2
CVE-2022-4123
LOW
Podman - Path Traversal
CVSS 3.3
CVE-2022-41720
HIGH
Windows - Info Disclosure
CVSS 7.5
CVE-2022-44942
HIGH
Casdoor < 1.126.1 - Arbitrary File Deletion via uploadFile Function
CVSS 8.1
CVE-2022-45833
MEDIUM
Easy WP SMTP <= 1.5.1 - Authenticated Path Traversal
CVSS 6.8
CVE-2022-45829
HIGH
Easy WP SMTP <= 1.5.1 - Authenticated Path Traversal
CVSS 8.7
CVE-2022-44900
CRITICAL
Py7zr < 0.20.1 - Path Traversal
CVSS 9.1
CVE-2022-46154
HIGH
Kodexplorer <4.50 - Info Disclosure
CVSS 8.6
CVE-2022-23470
HIGH
Galaxy 22.01-22.05 - Arbitrary File Read via Gunicorn Static Content Handling
CVSS 8.6
CVE-2022-42706
MEDIUM
Sangoma Asterisk Path Traversal via Asterisk Manager Interface GetConfig
CVSS 4.9
Details
Vulnerabilities
9,220
Exploit Likelihood
High