CWE-23
Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
417 vulnerabilities with CWE-23
CVE-2024-8510
MEDIUM
n-able n-central < 2024.6 - Path Traversal to Apache Tomcat WEB-INF Directory
CVSS 5.3
CVE-2024-54449
HIGH
LogicalDOC < 9.1 - Authenticated Arbitrary File Write and Remote Code Execution via Document API
CVSS 8.8
CVE-2024-12019
HIGH
LogicalDOC Community < 9.1 - Authenticated Relative Path Traversal
CVE-2024-56340
MEDIUM
IBM Cognos Analytics 11.2.0-11.2.4 FP5 - Local File Inclusion via Deficon Parameter
CVSS 6.5
CVE-2024-47051
CRITICAL
Mautic < 5.2.3 - Authenticated Remote Code Execution and Path Traversal via Asset Upload
CVSS 9.1
CVE-2024-13791
MEDIUM
Bit Assist < 1.5.2 - Authenticated Path Traversal via downloadResponseFile()
CVSS 4.9
CVE-2024-54462
HIGH
image_picker_android >=0.8.5+6 <0.8.12+18 - Path Traversal via Malicious Document Provider
CVSS 7.1
CVE-2024-54461
HIGH
file_selector_android 0.5.1-0.5.1+11 - Path Traversal via Malicious Document Provider
CVSS 7.1
CVE-2024-52012
MEDIUM
Apache Solr <9.7.0 - Path Traversal
CVSS 5.4
CVE-2024-46664
MEDIUM
Fortinet FortiRecorder 7.0.0-7.2.1 - Authenticated Path Traversal via HTTP Request
CVSS 5.5
CVE-2024-32115
MEDIUM
Fortinet FortiManager <7.4.3 - Path Traversal
CVSS 5.5
CVE-2024-13130
MEDIUM
Dahua IPC-HFW1200S-20241222 - Path Traversal
CVSS 4.3
CVE-2024-12897
MEDIUM
Intelbras VIP S3020 G2-VIP S4320 G2 20241222 - Path Traversal
CVSS 4.3
CVE-2024-12645
MEDIUM
Chunghwa Telecom topm-client >=0.3.14 <0.3.17 - Unauthenticated Arbitrary File Read via Relative Path Traversal
CVSS 6.5
CVE-2024-12642
HIGH
TenderDocTransfer 0.41.151-0.41.157 - Unauthenticated Arbitrary File Write via CSRF and Path Traversal
CVSS 8.1
CVE-2024-49062
MEDIUM
Microsoft SharePoint Server - Information Disclosure via Relative Path Traversal
CVSS 6.5
CVE-2024-12482
MEDIUM
cjbi wetech-cms 1.0/1.1/1.2 - Path Traversal via Database Backup Handler
CVSS 4.3
CVE-2024-54154
HIGH
JetBrains YouTrack <2024.3.51866 - Path Traversal
CVSS 8.0
CVE-2024-11315
CRITICAL
DVC 6.0-6.3 - Unauthenticated Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2024-11314
CRITICAL
DVC 6.0-<6.4 - Unauthenticated Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2024-11313
CRITICAL
DVC 6.0-6.3 - Unauthenticated Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2024-11312
CRITICAL
DVC 6.0-<6.4 - Unauthenticated Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2024-11311
CRITICAL
DVC 6.0-6.3 - Unauthenticated Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2024-11310
HIGH
DVC 6.0-6.3 - Unauthenticated Path Traversal
CVSS 7.5
CVE-2024-11309
HIGH
DVC 6.0-6.3 - Unauthenticated Path Traversal
CVSS 7.5
Details
Vulnerabilities
417