CWE-73

High likelihood

External Control of File Name or Path

Parent: CWE-642 - External Control of Critical State Data

The product allows user input to control or influence paths or file names that are used in filesystem operations.

396 vulnerabilities with CWE-73
CVE-2025-13322 HIGH
WP AUDIO GALLERY <2.0 - Privilege Escalation
CVSS 8.1
CVE-2025-64714 MEDIUM
Privatebin < 2.0.3 - Remote Code Execution
CVSS 5.8
CVE-2025-64739 MEDIUM
Zoom Client - Info Disclosure
CVSS 4.3
CVE-2025-64738 MEDIUM
Zoom Workplace for macOS <6.5.10 - Info Disclosure
CVSS 5.0
CVE-2025-59511 HIGH
Windows WLAN Service - Privilege Escalation
CVSS 7.8
CVE-2025-20614 MEDIUM
Intel(R) CIP <WIN_DCA_2.4.0.11001 - Privilege Escalation
CVSS 6.7
CVE-2025-8998 LOW
Unknown - Info Disclosure
CVSS 3.1
CVE-2025-11451 HIGH
Auto Amazon Links - Amazon Associates Affiliate Plugin <5.4.3 - Inf...
CVSS 7.5
CVE-2025-12915 MEDIUM
70mai X200 <20251019 - File Inclusion
CVSS 6.4
CVE-2025-64486 CRITICAL
calibre <8.13.0 - Code Injection
CVE-2025-12137 MEDIUM
Import WP - Path Traversal
CVSS 4.9
CVE-2025-62611 HIGH
aiomysql <0.3.0 - Code Injection
CVE-2025-8050 MEDIUM
Opentext Flipper - Path Traversal
CVSS 6.5
CVE-2025-8048 MEDIUM
Opentext Flipper - Path Traversal
CVSS 6.5
CVE-2025-11738 MEDIUM
Media Library Assistant <3.29 - Info Disclosure
CVSS 5.3
CVE-2025-62382 HIGH
Frigate <0.16.2 - Info Disclosure
CVSS 7.7
CVE-2025-59483 MEDIUM
Configuration Utility - Info Disclosure
CVSS 6.5
CVE-2025-59292 HIGH
Confidential Azure Container Instances - Privilege Escalation
CVSS 8.2
CVE-2025-59291 HIGH
Confidential Azure Container Instances - Privilege Escalation
CVSS 8.2
CVE-2025-59244 MEDIUM
Windows Core Shell - Path Traversal
CVSS 6.5
CVE-2025-59200 HIGH
Data Sharing Service Client - Spoofing
CVSS 7.7
CVE-2025-59185 MEDIUM
Windows Core Shell - Path Traversal
CVSS 6.5
CVE-2025-35053 MEDIUM
Newforma <2023.1 - Auth Bypass
CVSS 6.4
CVE-2025-10494 HIGH
Motors - Car Dealership & Classified Listings Plugin <1.4.89 - Priv...
CVSS 8.1
CVE-2025-10306 LOW
Backup Bolt <1.4.1 - Path Traversal
CVSS 3.8
Details
Vulnerabilities 396
Exploit Likelihood High