CWE-36

Absolute Path Traversal

Parent: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory.

117 vulnerabilities with CWE-36
CVE-2025-8575 HIGH
LWS Cleaner <2.4.1.3 - Privilege Escalation
CVSS 7.2
CVE-2025-9518 HIGH
Atec Debug <1.2.22 - Privilege Escalation
CVSS 7.2
CVE-2025-9516 MEDIUM
Atec Debug <1.2.22 - Info Disclosure
CVSS 4.9
CVE-2025-9259 MEDIUM
WebITR - Path Traversal
CVSS 6.5
CVE-2025-9258 MEDIUM
WebITR - Path Traversal
CVSS 6.5
CVE-2025-9257 MEDIUM
WebITR - Path Traversal
CVSS 6.5
CVE-2025-9256 MEDIUM
WebITR - Path Traversal
CVSS 6.5
CVE-2025-57790 HIGH
Commvault < 11.36.60 - Absolute Path Traversal
CVSS 8.8
CVE-2025-8912 HIGH
Wellchoose Organization Portal System - Path Traversal
CVSS 7.5
CVE-2025-8909 MEDIUM
Wellchoose Organization Portal System - Path Traversal
CVSS 6.5
CVE-2025-8213 HIGH
NinjaScanner - Path Traversal
CVSS 7.2
CVE-2025-53079 MEDIUM
Samsung Data Management Server Firmware - Absolute Path Traversal
CVSS 4.9
CVE-2025-8009 MEDIUM
Security Ninja - WordPress Security Plugin & Firewall <5.243 - Info...
CVSS 4.9
CVE-2025-53651 MEDIUM
Jenkins HTML Publisher Plugin <425 - Info Disclosure
CVSS 6.3
CVE-2025-53392 MEDIUM
pfSense CE 2.8.0 - Path Traversal
CVSS 5.0
CVE-2025-6381 HIGH
Beeteam368 Vidmov < 2.3.5 - Absolute Path Traversal
CVSS 8.8
CVE-2025-5927 HIGH
Wpeverest Everest Forms < 1.9.5 - Absolute Path Traversal
CVSS 7.5
CVE-2025-4799 HIGH
Wp-downloadmanager < 1.68.11 - Absolute Path Traversal
CVSS 7.2
CVE-2025-36574 HIGH
Dell Wyse Management Suite < 5.2 - Absolute Path Traversal
CVSS 8.2
CVE-2025-46822 HIGH
OsamaTaher Java-springboot-codebase - Path Traversal
CVE-2025-0001 MEDIUM
Abacus ERP <2024.210.16036-2022.105.15542 - Info Disclosure
CVSS 6.5
CVE-2025-0851 CRITICAL
Ai.djl API < 0.31.1 - Path Traversal
CVSS 9.8
CVE-2024-13945 MEDIUM
ASPECT <3.* - Info Disclosure
CVSS 6.0
CVE-2024-48850 HIGH
ASPECT <3.08.03 - Path Traversal
CVSS 7.2
CVE-2024-8501 HIGH
modelscope/agentscope <0.0.4 - Info Disclosure
CVSS 8.8
Details
Vulnerabilities 117
Links
MITRE CWE Entry Search this CWE With Exploits