cve.bz

CWE-23: Relative Path Traversal, page 2

Filter

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

What the weakness is: CWE-23 at MITRE

Ask an AI about CWE-23

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-23: Relative Path Traversal and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/23.html and https://cve.bz/cve/cwe/23?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.7CVE-2026-15913EPSS 0.4%

    In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achiev…

  2. 6.5CVE-2026-79728EPSS 0.3%

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this …

  3. 6.9CVE-2026-87747EPSS 0.6%

    The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files.

  4. 5.3CVE-2026-47680EPSS 0.5%

    The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influe…

  5. 7.0CVE-2026-77897EPSS 0.3%

    Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

  6. 7.8CVE-2026-72948EPSS 0.4%

    Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

  7. 9.2CVE-2026-67367EPSS 1.1%

    A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions < V3.3.2), SIMOVE Fleetmanager V4.0 (All versions < V4.0.1),…

  8. 8.8CVE-2026-80130EPSS 0.6%

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vu…

  9. 8.1CVE-2026-80133EPSS 0.7%

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this …

  10. 7.4CVE-2026-78254EPSS 0.5%

    The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite f…

  11. 8.8CVE-2026-85199EPSS 0.9%

    Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API. User-controlled identifiers used to create, update, or delete Self-orchestrator resources were incorporated into filesystem pa…

  12. 8.7CVE-2026-81849EPSS 0.9%

    Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authenticated remote user whose ssm:SendCommand permission is restricted to the AWS-Download…

  13. 6.8CVE-2026-81838EPSS 0.2%

    A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containi…

  14. 7.5CVE-2026-66907EPSS 0.8%

    Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-google-storage consumer downlo…

  15. 9.1CVE-2026-66906EPSS 0.8%

    Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob compone…

  16. 5.5CVE-2026-60093EPSS 0.2%

    Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake …

  17. 9.9CVE-2026-66897EPSS 0.7%

    A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target…

  18. 8.7CVE-2026-78212EPSS 0.7%

    4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files.

  19. 8.8CVE-2026-53528EPSS 0.5%

    LeafWiki is a self-hosted wiki. Versions 0.3.0 through 0.10.0 have a path traversal vulnerability in LeafWiki’s asset rename functionality. An authenticated user with editor permissions could move files that are accessible to the LeafWiki …

  20. 6.7CVE-2026-77113EPSS 0.2%

    Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in cras…

  21. 8.8CVE-2026-63509EPSS 1.0%

    Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

  22. 7.5CVE-2026-63043EPSS 0.8%

    Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pic…

  23. 7.5CVE-2026-63490EPSS 0.7%

    Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.3, com.github.jknack.handlebars.springmvc.SpringTemplateLoader resolves attacker-influenced Spring MVC view names through Spring ResourceLoader wit…

  24. 7.3CVE-2026-72677EPSS 0.4%

    Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139). Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without re…

  25. 9.8CVE-2026-16230EPSS 0.7%

    The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete_file function in all versions up to, and including, 3.0.6. This makes it possible for unauthentica…

  26. 8.8CVE-2026-70337EPSS 0.9%

    Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

  27. 7.8CVE-2026-65810EPSS 0.4%

    Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.

  28. 6.5CVE-2026-62837EPSS 1.2%

    Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  29. 7.1CVE-2026-53416EPSS 0.2%

    Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.

  30. 8.5CVE-2026-16053EPSS 1.8%

    Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.

  31. 6.9CVE-2026-21082EPSS 0.2%

    Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.

  32. 7.5CVE-2026-10595EPSS 0.6%

    A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises from the improper handling of user-controlled path input, whic…

  33. 6.5CVE-2026-56794EPSS 0.5%

    Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for…

  34. 7.0CVE-2026-66881EPSS 0.6%

    Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livemd notebook can declare file_entries metadata, each entry ca…

  35. 7.5CVE-2026-18907EPSS 0.9%

    Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

  36. 8.7CVE-2026-55100EPSS 0.6%

    hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query st…

  37. 7.9CVE-2026-6540EPSS 0.5%

    Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes ar…

  38. 7.1CVE-2026-18192EPSS 0.6%

    VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

  39. 5.1CVE-2026-63303EPSS 0.6%

    A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash (../) sequences before resolving and serving the requested file. An authenticated attacke…

  40. 4.8CVE-2026-47078EPSS 0.1%

    Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:check_dir_l…

  41. 8.1CVE-2026-15802EPSS 0.8%

    The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_callback' function in all versions up to, and including, 4.9. This makes it possi…

  42. 6.5CVE-2026-58481EPSS 0.2%

    Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped file access under a configured sandbox `basePath`, but its path containment checks use raw string prefix tests. A sandbox …

  43. 6.1CVE-2026-58413EPSS 0.2%

    Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.backups', backupId)` and only checks that this path exists. It …

  44. 6.5CVE-2026-51026EPSS 1.3%

    Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request.

  45. 7.7CVE-2026-54910EPSS 0.4%

    FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the `subtitlesHandler` endpoint (`GET /api/media/subtitles`) accepts two user-controlled query parameters: `path` and `name`, both of which ar…

  46. 6.8CVE-2026-15415EPSS 0.4%

    AWS HealthOmics is a HIPAA-eligible service that fully manages the compute, storage, and workflow engine infrastructure required to run bioinformatics analyses at scale for clinical diagnostics, drug discovery, and agricultural research. …

  47. 6.8CVE-2026-62843EPSS 0.4%

    File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAll(nameInArchive, "\", "/"…

  48. 8.8CVE-2026-56196EPSS 1.0%

    Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.

  49. 7.8CVE-2026-50454EPSS 0.4%

    Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

  50. 6.8CVE-2026-50426EPSS 0.6%

    Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.