CWE-73

High likelihood

External Control of File Name or Path

Parent: CWE-642 - External Control of Critical State Data

The product allows user input to control or influence paths or file names that are used in filesystem operations.

519 vulnerabilities with CWE-73
CVE-2023-39542 HIGH
Foxit Reader 12.1.3.15356 - Remote Code Execution via JavaScript saveAs API
CVSS 8.8
CVE-2023-35985 HIGH
Foxit Reader 12.1.3.15356 - Code Injection
CVSS 8.8
CVE-2023-34982 MEDIUM
AVEVA Batch Management < 2020 - Authenticated Denial of Service via File Deletion
CVSS 5.5
CVE-2023-46851 MEDIUM
Apache Allura <1.16.0 - Info Disclosure
CVSS 4.9
CVE-2023-20114 MEDIUM
Cisco Firepower Management Center - RCE
CVSS 6.5
CVE-2023-43074 MEDIUM
Dell Unity 5.3 - Arbitrary File Creation
CVSS 5.2
CVE-2023-36634 HIGH
FortiAP-U <7.0.0, <6.2.5, <=6.0, <=5.4 - Command Injection
CVSS 7.1
CVE-2023-36764 HIGH
Microsoft SharePoint Server - Privilege Escalation
CVSS 8.8
CVE-2023-4634 CRITICAL
Media Library Assistant <3.09 - RCE
CVSS 9.8
CVE-2023-32615 MEDIUM
Open Automation Software OAS Platform <18.00.0072 - File Write
CVSS 6.5
CVE-2023-4749 MEDIUM
SourceCodester Inventory Management System 1.0 - File Inclusion
CVSS 6.3
CVE-2023-20234 MEDIUM
Cisco FXOS Software - Privilege Escalation
CVSS 4.4
CVE-2023-35384 MEDIUM
Windows HTML Platforms < - Privilege Escalation
CVSS 5.4
CVE-2023-4191 MEDIUM
SourceCodester Resort Reservation System 1.0 - File Inclusion
CVSS 6.3
CVE-2023-3643 HIGH
Boss Mini 1.4.0 Build 6221 - File Inclusion
CVSS 7.3
CVE-2023-35308 MEDIUM
Microsoft Windows MSHTML Platform - Security Feature Bypass
CVSS 6.5
CVE-2023-3256 HIGH
Advantech R-SeeNet <2.4.22 - Info Disclosure
CVSS 8.8
CVE-2023-28603 HIGH
Zoom VDI client installer <5.14.0 - Info Disclosure
CVSS 7.7
CVE-2023-0008 MEDIUM
Palo Alto Networks PAN-OS - Info Disclosure
CVSS 4.4
CVE-2023-29324 MEDIUM
Windows MSHTML < - Privilege Escalation
CVSS 6.5
CVE-2023-2554 HIGH
unilogies/bumsys <2.2.0 - Path Traversal
CVSS 7.2
CVE-2023-30943 MEDIUM
Moodle 4.1.0-4.1.2 - Unauthenticated Arbitrary Folder Creation via TinyMCE Loader
CVSS 6.5
CVE-2023-2152 MEDIUM
SourceCodester Student Study Center Desk Management System 1.0 - Fi...
CVSS 5.3
CVE-2023-1105 HIGH
GitHub flatpressblog/flatpress <1.3 - Path Traversal
CVSS 8.1
CVE-2023-1070 HIGH
nilsteampassnet/teampass <3.0.0.22 - Path Traversal
CVSS 7.1
Details
Vulnerabilities 519
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits