cve.bz

CWE-23: Relative Path Traversal, page 6

Filter

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

What the weakness is: CWE-23 at MITRE

Ask an AI about CWE-23

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-23: Relative Path Traversal and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/23.html and https://cve.bz/cve/cwe/23?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2025-51052EPSS 0.5%

    A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'file_get_contents()' function call in '/api_vedo/template'.

  2. 9.1CVE-2025-53082EPSS 0.5%

    An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

  3. 9.4CVE-2025-54531EPSS 0.3%

    In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows

  4. 8.4CVE-2025-54317EPSS 0.7%

    An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creating a Layout Template, which can lead to remote code execution (RCE).

  5. 6.5CVE-2025-46002EPSS 1.1%

    An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint.

  6. 8.7CVE-2025-7619EPSS 0.9%

    BatchSignCS, a background Windows application developed by WellChoose, has an Arbitrary File Write vulnerability. If a user visits a malicious website while the application is running, remote attackers can write arbitrary files to any path…

  7. 8.8CVE-2025-48817EPSS 1.1%

    Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  8. 8.7CVE-2025-7146EPSS 0.6%

    The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to read arbitrary system file.

  9. 9.9CVE-2025-52207ExploitEPSS 1.7%

    PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.

  10. 6.3CVE-2025-44163EPSS 0.6%

    RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attacker can send a crafted POST request with a path traversal payload in the `entity` parameter to overwrite arbitrary file…

  11. 7.4CVE-2025-52922EPSS 0.5%

    Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated attacker with access to the admin panel could abuse this to: (1) fully map the filesystem structure via the /api/file_manager/files?base_fold…

  12. 8.8CVE-2025-34510ExploitEPSS 25%

    Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by se…

  13. 8.4CVE-2025-33112EPSS 0.2%

    IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input.

  14. 9.8CVE-2025-3365EPSS 0.6%

    A missing protection against path traversal allows to access any file on the server.

  15. 5.8CVE-2025-49466EPSS 0.6%

    aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,

  16. 7.5CVE-2025-48957EPSS 0.8%

    AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and oth…

  17. 9.4CVE-2025-47788EPSS 0.5%

    Atheos is a self-hosted browser-based cloud IDE. Prior to v602, similar to GHSA-rgjm-6p59-537v/CVE-2025-22152, the `$target` parameter in `/controller.php` was not properly validated, which could allow an attacker to execute arbitrary file…

  18. 9.8CVE-2025-47445ExploitEPSS 5.2%

    Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26.

  19. 6.3CVE-2025-31493EPSS 0.6%

    Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby sites that use the `collection()` helper or `$kirby->collection()` method with a dynamic collection name…

  20. 2.3CVE-2025-30207EPSS 0.6%

    Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Site…

  21. 6.3CVE-2025-30159EPSS 0.7%

    Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby sites that use the `snippet()` helper or `$kirby->snippet()` method with a dynamic snippet name (such as…

  22. 5.3CVE-2025-22859EPSS 0.6%

    A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to perform a limited arbitrary file write on the system via upl…

  23. 7.1CVE-2025-24350EPSS 0.4%

    A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary certificates in arbitrary file system paths via a crafted HTTP reque…

  24. 5.4CVE-2025-24343EPSS 0.6%

    A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary files in arbitrary file system paths via a crafted HTTP request.

  25. 5.3CVE-2023-35816EPSS 0.6%

    DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.

  26. 9.8CVE-2025-46433EPSS 0.6%

    In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible

  27. 7.5CVE-2025-43016EPSS 0.4%

    In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session

  28. 8.3CVE-2025-27791EPSS 0.5%

    Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from…

  29. 8.8CVE-2025-32017EPSS 0.6%

    Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able to craft management API request that exploit a path traversal vulnerability to upload files into a incorrect location.…

  30. 8.1CVE-2025-32409EPSS 1.1%

    Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image (signed with debug keys) can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of…

  31. 4.9CVE-2025-32137EPSS 0.8%

    Relative Path Traversal vulnerability in Cristián Lávaque s2Member s2member allows Path Traversal.This issue affects s2Member: from n/a through <= 250419.

  32. 8.8CVE-2023-40714EPSS 0.7%

    A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements

  33. 8.1CVE-2025-2007EPSS 1.2%

    The Import Export Suite for CSV and XML Datafeed plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteImage() function in all versions up to, and including, 7.19. This makes it…

  34. 5.3CVE-2025-2961EPSS 0.5%

    A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument t…

  35. 4.6CVE-2025-29789EPSS 0.9%

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue.

  36. 7.5CVE-2025-27553EPSS 1.4%

    Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT' promises that "an exception is throw…

  37. 7.5CVE-2024-9363EPSS 1.1%

    An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to denial of service by terminating critical containers. An attacker can delete important files within the containers, such a…

  38. 9.1CVE-2024-8551EPSS 1.0%

    A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, …

  39. 4.4CVE-2024-7058EPSS 0.3%

    A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the persona…

  40. 4.3CVE-2024-6583EPSS 0.6%

    A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

  41. 5.3CVE-2024-6483EPSS 0.9%

    A vulnerability in the `runs/delete-batch` endpoint of aimhubio/aim version 3.19.3 allows for arbitrary file or directory deletion through path traversal. The endpoint does not mitigate path traversal when handling user-specified run-names…

  42. 7.2CVE-2024-10513EPSS 0.9%

    A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. This vulnerability allows users with the 'manager' role to access and manipulate th…

  43. 5.3CVE-2024-8510EPSS 0.4%

    N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6.

  44. 8.7CVE-2024-54449EPSS 0.6%

    The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can b…

  45. 7.1CVE-2024-12019EPSS 0.5%

    The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read the contents of files on the underlying operating system. An account with ‘read’ and ‘download’ privileges on at least…

  46. 7.5CVE-2025-2056EPSS 0.6%

    The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 5.4.01 via the showFile function. This makes it possible for unauthenticated attackers to read…

  47. 9.8CVE-2025-23360EPSS 0.5%

    NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering.

  48. 8.8CVE-2025-26645EPSS 3.2%

    Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  49. 7.5CVE-2025-27610EPSS 1.2%

    Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.13, 3.0.14, and 3.1.12, `Rack::Static` can serve files under the specified `root:` even if `urls:` are provided, which may expose other files under t…

  50. 9.3CVE-2025-23410EPSS 0.7%

    When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types.