cve.bz

CWE-36: Absolute Path Traversal, page 3

Filter

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory.

What the weakness is: CWE-36 at MITRE

Ask an AI about CWE-36

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-36: Absolute Path Traversal and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/36.html and https://cve.bz/cve/cwe/36?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2024-11978EPSS 0.8%

    DreamMaker from Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

  2. 4.9CVE-2024-10651EPSS 0.6%

    IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system fi…

  3. 9.1CVE-2024-47883EPSS 1.6%

    The OpenRefine fork of the MIT Simile Butterfly server is a modular web application framework. The Butterfly framework uses the `java.net.URL` class to refer to (what are expected to be) local resource files, like images or templates. This…

  4. 6.5CVE-2024-20379EPSS 0.6%

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to read arbitrary files from the …

  5. 9.8CVE-2024-9924EPSS 0.8%

    The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthenticated remote attackers still can download arbitrary system files, which may be deleted subsequently .

  6. 8.8CVE-2024-45291EPSS 0.9%

    PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that links images from arbitrary paths. When embedding images has been enabled in HTML writer with `$wr…

  7. 7.5CVE-2024-45290EPSS 0.6%

    PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX file, PhpSpreadsheet retrieves the image si…

  8. 8.7CVE-2024-8497EPSS 0.6%

    Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 possess a file that can be read arbitrarily that could allow an attacker obtain administrator credentials.

  9. 6.5CVE-2024-8778EPSS 0.6%

    OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read arbitrary system files.

  10. 6.5CVE-2024-7323EPSS 0.6%

    Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files fr…

  11. 7.5CVE-2024-28806EPSS 0.6%

    An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path.

  12. 9.8CVE-2024-20401EPSS 2.3%

    A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is …

  13. 7.5CVE-2024-6250ExploitEPSS 1.9%

    An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the `open_file` endpoint of `lollms_advanced.py`. The `sanitize_path` function with `allow_absolute_path=True` allows an attacker to access arbi…

  14. 8.6CVE-2024-33620EPSS 0.7%

    Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated r…

  15. 7.5CVE-2024-4881EPSS 0.9%

    A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 5.9.0. The vulnerability arises due to improper validation of file paths between Windo…

  16. 7.5CVE-2024-2548EPSS 0.9%

    A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `lollms_core/lollms/server/endpoints/lollms_binding_files_server.py` and `lollms_core/lollms/security.py` files. Due to inadequate vali…

  17. 9.1CVE-2024-2362EPSS 1.1%

    A path traversal vulnerability exists in the parisneo/lollms-webui version 9.3 on the Windows platform. Due to improper validation of file paths between Windows and Linux environments, an attacker can exploit this vulnerability to delete a…

  18. 6.5CVE-2023-41830EPSS 0.2%

    An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization.

  19. 8.8CVE-2024-29053EPSS 3.2%

    Microsoft Defender for IoT Remote Code Execution Vulnerability

  20. 8.8CVE-2024-21323EPSS 3.2%

    Microsoft Defender for IoT Remote Code Execution Vulnerability

  21. 5.3CVE-2024-1703EPSS 0.7%

    A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been classified as problematic. This affects the function openfile of the file /adminapi/system/file/openfile. The manipulation leads to absolute path traversal. The exploit ha…

  22. 2.7CVE-2023-50955EPSS 0.6%

    IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.

  23. 5.3CVE-2023-5390EPSS 0.6%

    An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limi…

  24. 6.5CVE-2023-30970EPSS 0.5%

    Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system.

  25. 6.3CVE-2023-5115EPSS 1.0%

    An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extr…

  26. 7.2CVE-2023-36786EPSS 2.6%

    Skype for Business Remote Code Execution Vulnerability

  27. 8.8CVE-2023-5022EPSS 0.8%

    A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_templets_post.php. The manipulation of the argument activepat…

  28. 8.8CVE-2023-40597EPSS 0.2%

    In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.

  29. 7.5CVE-2023-4172EPSS 0.9%

    A vulnerability, which was classified as problematic, has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This issue affects some unknown processing of the file \Service\FileHandler.ashx. The manipulation of t…

  30. 10.0CVE-2023-3765ExploitEPSS 68%

    Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.

  31. 6.5CVE-2023-34135EPSS 1.6%

    Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: …

  32. 7.3CVE-2023-32054EPSS 0.9%

    Volume Shadow Copy Elevation of Privilege Vulnerability

  33. 7.5CVE-2023-2765EPSS 2.2%

    A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path tr…

  34. 6.5CVE-2023-2101EPSS 0.8%

    A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affects the function uploadPictureByUrl of the file /mogu-picture/file/uploadPicsByUrl. The manipulation of the argument url…

  35. 3.3CVE-2023-1176EPSS 0.6%

    Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.

  36. 8.8CVE-2022-20958EPSS 1.1%

    A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request forgery (SSRF) attack on an affected device. This vulnerabi…

  37. 6.5CVE-2022-20791EPSS 1.5%

    A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Prese…

  38. 8.8CVE-2022-24877EPSS 1.2%

    Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to expose sensitive data from the controller’s pod filesystem an…

  39. 7.5CVE-2022-1554EPSS 1.4%

    Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52.

  40. 5.5CVE-2021-34711EPSS 0.3%

    A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit th…

  41. 7.2CVE-2021-1618EPSS 2.7%

    Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker to conduct a path traversal or command injection attack on an affected system. These vulnera…

  42. 6.5CVE-2021-1617EPSS 1.5%

    Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker to conduct a path traversal or command injection attack on an affected system. These vulnera…

  43. 6.5CVE-2021-21586EPSS 4.0%

    Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system.

  44. 6.5CVE-2021-32507EPSS 1.3%

    Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of…

  45. 6.5CVE-2021-32506EPSS 1.3%

    Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of QSA…

  46. 6.5CVE-2021-30173EPSS 1.2%

    Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file.

  47. 7.5CVE-2021-1297EPSS 3.7%

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to conduct directory traversal attacks and overwrit…

  48. 7.5CVE-2021-1296EPSS 3.7%

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to conduct directory traversal attacks and overwrit…

  49. 7.8CVE-2018-20250KEVExploitEPSS 96%

    In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extr…

  50. 7.1CVE-2017-7929EPSS 1.5%

    An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse the file system to access restricted files…