CWE-35: Path Traversal: '.../...//', page 4
Filter
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.
What the weakness is: CWE-35 at MITRE. All weaknesses
Ask an AI about CWE-35
Show the prompt
Explain CWE-35: Path Traversal: '.../...//' and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/35.html and https://cve.bz/cve/cwe/35?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.5CVE-2024-49258EPSS 0.5%
Path Traversal: '.../...//' vulnerability in Limbcode WordPress Gallery Plugin – Limb Image Gallery limb-gallery.This issue affects WordPress Gallery Plugin – Limb Image Gallery: from n/a through <= 1.5.7.
- 7.5CVE-2024-45248EPSS 0.5%
Multi-DNC – CWE-35: Path Traversal: '.../...//'
- 7.5CVE-2024-47324EPSS 0.5%
Path Traversal: '.../...//' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vertical and Horizontal timeline plugin: from n/a through <= 3.6.7.
- 4.3CVE-2024-47171EPSS 0.5%
Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead …
- 4.3CVE-2024-47170EPSS 0.5%
Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chosen locations on the server. This issue c…
- 8.8CVE-2024-47169EPSS 0.8%
Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload arbitrary files to attacker-chosen locations on the server, including JavaS…
- 4.3CVE-2024-0067EPSS 0.4%
Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API ledlimit.cgi was vulnerable for path traversal attacks allowing to list folder/file names on the local file system of the Axis device. Axis has released pat…
- 5.9CVE-2024-7608EPSS 0.3%
An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.
- 6.5CVE-2024-45190EPSS 0.9%
Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request
- 8.8CVE-2024-0113EPSS 1.1%
NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation…
- 9.3CVE-2024-40505EPSS 0.4%
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component.
- 8.8CVE-2024-38706EPSS 0.7%
Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7.
- 9.8CVE-2024-39171EPSS 1.2%
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
- 7.5CVE-2024-36991ExploitEPSS 13%
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterpris…
- 8.8CVE-2024-5481EPSS 0.7%
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.8.23 via the esc_dir function. This makes it possible for authenticated attackers to cu…
- 6.5CVE-2024-34191EPSS 0.5%
htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the delete_post() function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request.
- 6.8CVE-2024-2654EPSS 0.9%
The File Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.2.5 via the fm_download_backup function. This makes it possible for authenticated attackers, with administrator access and a…
- 7.2CVE-2024-27901EPSS 0.7%
SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users and pass it through to the file API's. Thus, causing a considerable impact on confidentiality, integri…
- 9.8CVE-2024-2863ExploitEPSS 64%
This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.
- 6.5CVE-2023-41793EPSS 0.4%
: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and downloading them outside the allowed directories. This issue affects Pandora FMS: from 700 t…
- 8.8CVE-2024-1886EPSS 0.8%
This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.
- 8.8CVE-2023-5800EPSS 0.7%
Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticati…
- 8.8CVE-2023-46690EPSS 1.9%
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to remote code execution.
- 6.5CVE-2023-5885EPSS 1.1%
The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users.
- 7.5CVE-2023-6252EPSS 0.9%
Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration f…
- 7.1CVE-2023-21418EPSS 0.8%
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operato…
- 7.1CVE-2023-21417EPSS 0.7%
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw can only be exploited after authenticatin…
- 6.5CVE-2023-21416EPSS 0.7%
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web inte…
- 8.1CVE-2023-21415EPSS 0.7%
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operat…
- 6.5CVE-2023-39916EPSS 0.6%
NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains a possible path traversal vulnerability in the optional, off-by-default keep-rrdp-responses feature that allows users to store th…
- 8.1CVE-2023-32714EPSS 43%
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk ins…
- 7.5CVE-2022-48476EPSS 0.8%
In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
- 7.5CVE-2022-3693EPSS 0.7%
Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3.
- 7.1CVE-2022-36928EPSS 0.3%
Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit this vulnerability to read and write to the Zoom application data directory.
- 5.5CVE-2022-46826EPSS 0.2%
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.
- 7.5CVE-2022-2265EPSS 0.9%
The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25
- 8.1CVE-2022-24774EPSS 1.5%
CycloneDX BOM Repository Server is a bill of materials (BOM) repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. …
- 4.9CVE-2021-1364EPSS 1.4%
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL inje…
- 6.5CVE-2021-1357EPSS 1.4%
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL inje…
- 6.5CVE-2021-1355EPSS 1.4%
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL inje…
- 4.9CVE-2021-1282EPSS 1.4%
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL inje…
- 9.1CVE-2020-27130EPSS 66%
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests t…
- 9.8CVE-2018-3744EPSS 2.2%
The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.