cve.bz

CWE-29: Path Traversal: '\..\filename', page 2

Filter

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.

What the weakness is: CWE-29 at MITRE. All weaknesses

Ask an AI about CWE-29

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-29: Path Traversal: '\..\filename' and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/29.html and https://cve.bz/cve/cwe/29?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2023-6977ExploitEPSS 3.9%

    This vulnerability enables malicious users to read sensitive files on the server.

  2. 9.8CVE-2023-6975EPSS 2.0%

    A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.

  3. 7.5CVE-2023-6909ExploitEPSS 90%

    Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

  4. 8.1CVE-2023-6831ExploitEPSS 3.3%

    Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

  5. 7.5CVE-2023-6021ExploitEPSS 37%

    LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2…

  6. 7.5CVE-2023-6023ExploitEPSS 3.0%

    An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.

  7. 8.8CVE-2023-6130EPSS 1.0%

    Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

  8. 8.8CVE-2023-2984EPSS 0.9%

    Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22.

  9. 9.8CVE-2023-2780ExploitEPSS 6.3%

    Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.

  10. 9.8CVE-2023-1177ExploitEPSS 70%

    Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

  11. 8.8CVE-2023-1034EPSS 26%

    Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9.

  12. 7.8CVE-2023-0104EPSS 22%

    The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.

  13. 5.5CVE-2023-0316EPSS 0.8%

    Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0.

  14. 7.3CVE-2022-2788EPSS 0.2%

    Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file …