cve.bz

CWE-23: Relative Path Traversal, page 8

Filter

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

What the weakness is: CWE-23 at MITRE

Ask an AI about CWE-23

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-23: Relative Path Traversal and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/23.html and https://cve.bz/cve/cwe/23?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2024-47769EPSS 0.8%

    IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is identified that the public endpoint is accessible to an unauthenticated user. The …

  2. 8.8CVE-2024-20449EPSS 0.9%

    A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with low privileges to execute arbitrary code on an affected device. This vulnerability is due to improper path validation. …

  3. 5.3CVE-2024-9405EPSS 0.5%

    An incorrect limitation of a path to a restricted directory (path traversal) has been detected in Pluck CMS, affecting version 4.7.18. An unauthenticated attacker could extract sensitive information from the server via the absolute path of…

  4. 6.5CVE-2024-45816EPSS 0.7%

    Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not inte…

  5. 7.1CVE-2024-43454EPSS 22%

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

  6. 7.5CVE-2024-38258EPSS 4.7%

    Windows Remote Desktop Licensing Service Information Disclosure Vulnerability

  7. 9.8CVE-2024-43399EPSS 1.0%

    Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Before 4.0.7, there is a flaw in the Static Libraries analysis section. Specifically,…

  8. 7.5CVE-2024-7693EPSS 1.0%

    Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server.

  9. 7.5CVE-2024-6433EPSS 0.6%

    The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted path. This vulnerability can be exploited by sending a request to the application…

  10. 4.9CVE-2024-3122EPSS 0.6%

    CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.

  11. 7.5CVE-2024-5547EPSS 1.0%

    A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository, affecting the latest version. The vulnerability arises due to insufficient sanitization of the 'project_name' paramete…

  12. 6.8CVE-2024-37138EPSS 0.4%

    Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the …

  13. 8.8CVE-2024-3497EPSS 0.7%

    Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL.

  14. 6.9CVE-2024-2461EPSS 0.5%

    If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessible

  15. 3.3CVE-2024-4330EPSS 0.3%

    A path traversal vulnerability was identified in the parisneo/lollms-webui repository, specifically within version 9.6. The vulnerability arises due to improper handling of user-supplied input in the 'list_personalities' endpoint. By craft…

  16. 6.5CVE-2024-36362EPSS 0.5%

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible

  17. 8.8CVE-2024-35186EPSS 0.8%

    gitoxide is a pure Rust implementation of Git. During checkout, `gix-worktree-state` does not verify that paths point to locations in the working tree. A specially crafted repository can, when cloned, place new files anywhere writable by t…

  18. 10.0CVE-2023-3941EPSS 0.9%

    Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system with root privileges. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR…

  19. 7.5CVE-2023-3940EPSS 0.8%

    Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to access any file on the system. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly ot…

  20. 8.8CVE-2024-33615EPSS 0.7%

    A specially crafted Zip file containing path traversal characters can be imported to the CyberPower PowerPanel server, which allows file writing to the server outside the intended scope, and could allow an attacker to achieve remote c…

  21. 8.8CVE-2024-30010EPSS 2.3%

    Windows Hyper-V Remote Code Execution Vulnerability

  22. 6.5CVE-2024-34712EPSS 0.6%

    Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as `Client.rest.channels.removeBan` is not url-encoded, resulting in specially crafted input such as `../../../channels/{id}` being …

  23. 8.1CVE-2024-0549EPSS 0.8%

    mintplex-labs/anything-llm is vulnerable to a relative path traversal attack, allowing unauthorized attackers with a default role account to delete files and folders within the filesystem, including critical database files such as 'anythin…

  24. 8.2CVE-2024-32005EPSS 0.8%

    NiceGUI is an easy-to-use, Python-based UI framework. A local file inclusion is present in the NiceUI leaflet component when requesting resource files under the `/_nicegui/{__version__}/resources/{key}/{path:path}` route. As a result any f…

  25. 9.9CVE-2024-3025EPSS 1.0%

    mintplex-labs/anything-llm is vulnerable to path traversal attacks due to insufficient validation of user-supplied input in the logo filename functionality. Attackers can exploit this vulnerability by manipulating the logo filename to refe…

  26. 7.5CVE-2024-0335EPSS 0.6%

    ABB has internally identified a vulnerability in the ABB VPNI feature of the S+ Control API component which may be used by several Symphony Plus products (e.g., S+ Operations, S+ Engineering and S+ Analyst) This issue affects Symphony P…

  27. 8.8CVE-2024-20352EPSS 1.5%

    A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is du…

  28. 6.1CVE-2024-20310EPSS 0.5%

    A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an authentica…

  29. 7.5CVE-2024-25944EPSS 0.8%

    Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesyste…

  30. 7.5CVE-2024-2053ExploitEPSS 45%

    The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The …

  31. 9.8CVE-2024-24578ExploitEPSS 8.7%

    RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution (RCE) vulnerability, caused by multiple iss…

  32. 8.8CVE-2024-27770EPSS 0.8%

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal

  33. 4.9CVE-2024-22398EPSS 0.9%

    An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Security Appliance could allow a remote attacker with administrative privileges to conduct a directory traversal attack and de…

  34. 9.9CVE-2023-6825ExploitEPSS 6.0%

    The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7.2.1 (free version) and 8.3.4 (Pro version) via the target parameter in the mk_file_folder_manager…

  35. 2.1CVE-2024-2318EPSS 0.9%

    A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the …

  36. 7.3CVE-2024-27199KEVExploitEPSS >99.9%

    In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

  37. 6.5CVE-2024-0550EPSS 0.7%

    A user who is privileged already `manager` or `admin` can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API to download any valid files. The attacker would have to have been granted priv…

  38. 8.8CVE-2023-42791EPSS 4.0%

    A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP re…

  39. 6.5CVE-2024-22226EPSS 0.4%

    Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on th…

  40. 5.3CVE-2024-24942EPSS 32%

    In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives

  41. 4.3CVE-2024-24940EPSS 0.3%

    In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives

  42. 5.3CVE-2024-24938EPSS 0.7%

    In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation

  43. 7.5CVE-2021-22281EPSS 0.4%

    : Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12.

  44. 6.5CVE-2024-22096EPSS 0.6%

    In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system.

  45. 6.5CVE-2024-22421EPSS 0.7%

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens expo…

  46. 9.8CVE-2024-22415EPSS 0.5%

    jupyter-lsp is a coding assistance tool for JupyterLab (code navigation + hover suggestions + linters + autocompletion + rename) using Language Server Protocol. Installations of jupyter-lsp running in environments without configured file s…

  47. 7.5CVE-2023-49801EPSS 0.4%

    Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issue relates to the `get_pfp` and `get_banner` routes on Auth Server. The issue is that there is no check to ensure that t…

  48. 8.8CVE-2023-31036EPSS 0.9%

    NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path tra…

  49. 7.8CVE-2023-50255EPSS 1.1%

    Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening …

  50. 7.5CVE-2023-6722EPSS 0.8%

    A path traversal vulnerability has been detected in Repox, which allows an attacker to read arbitrary files on the running server, resulting in a disclosure of sensitive information. An attacker could access files such as application code …