CWE-22

High likelihood

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

9,142 vulnerabilities with CWE-22
CVE-2025-5741 MEDIUM
Charging Station < - Path Traversal
CVSS 4.9
CVE-2025-5740 HIGH
Web Server <version> - Path Traversal
CVSS 7.2
CVE-2025-42977 HIGH
SAP NetWeaver Visual Composer - Path Traversal
CVSS 7.6
CVE-2025-49138 MEDIUM
HAX CMS PHP <11.0.0 - Local File Inclusion
CVSS 6.5
CVE-2025-48267 HIGH
ThimPress WP Pipes <1.4.2 - Path Traversal
CVSS 8.6
CVE-2025-48130 HIGH
Spice Blocks <2.0.7.2 - Path Traversal
CVSS 7.5
CVE-2025-48124 HIGH
Holest Engineering Spreadsheet Price Changer <2.4.37 - Path Traversal
CVSS 7.5
CVE-2025-47511 MEDIUM
Welcart e-Commerce <= 2.11.13 - Path Traversal
CVSS 6.8
CVE-2025-39473 HIGH
WebGeniusLab Seofy Core <1.4.5 - Path Traversal
CVSS 8.1
CVE-2025-31635 HIGH
LambertGroup CLEVER <2.6 - Path Traversal
CVSS 7.5
CVE-2025-31050 HIGH
Apptha Slider Gallery <2.5 - Path Traversal
CVSS 7.5
CVE-2025-5880 MEDIUM
Whistle 2.9.98 - Path Traversal via /cgi-bin/sessions/get-temp-file filename Parameter
CVSS 4.3
CVE-2025-3485 HIGH
Allegra < 8.1.2 - Authenticated Path Traversal and Remote Code Execution via extractFileFromZip
CVSS 8.8
CVE-2025-33035 MEDIUM
File Station 5 <5.5.6.4847 - Path Traversal
CVSS 6.5
CVE-2025-5714 MEDIUM
Isolucoesweb Solucoescoop < 2025-05-16 - Path Traversal
CVSS 4.3
CVE-2025-3055 HIGH
WP User Frontend Pro <4.1.3 - Privilege Escalation
CVSS 8.1
CVE-2025-20277 LOW
Cisco Unified CCX - Authenticated RCE
CVSS 3.4
CVE-2025-20259 MEDIUM
Cisco ThousandEyes Endpoint Agent for Windows - Local File Deletion
CVSS 5.3
CVE-2025-5545 MEDIUM
aaluoxiang oa_system - Path Traversal
CVSS 4.3
CVE-2025-5544 MEDIUM
aaluoxiang oa_system - Path Traversal in UserpanelController Image Function
CVSS 4.3
CVE-2025-5509 MEDIUM
quequnlong shiyi-blog <1.2.1 - Path Traversal
CVSS 6.3
CVE-2025-4517 CRITICAL
Python <3.14 - Path Traversal
CVSS 9.4
CVE-2025-4330 HIGH
CPython Path Traversal via TarFile Extraction Filter Bypass
CVSS 7.5
CVE-2025-4138 HIGH
CPython Path Traversal via TarFile Extraction Filter Bypass
CVSS 7.5
CVE-2025-31359 HIGH
Parallels Desktop for Mac 20.2.2 - Path Traversal and Arbitrary File Write via PVMP Package Unpacking
CVSS 8.8
Details
Vulnerabilities 9,142
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits