cve.bz

CWE-37: Path Traversal: '/absolute/pathname/here'

Filter

The product accepts input in the form of a slash absolute path ('/absolute/pathname/here') without appropriate neutralization.

What the weakness is: CWE-37 at MITRE. All weaknesses

Ask an AI about CWE-37

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-37: Path Traversal: '/absolute/pathname/here' and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/37.html and https://cve.bz/cve/cwe/37?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.9CVE-2024-12806EPSS 0.7%

    A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.

  2. 6.5CVE-2023-20087EPSS 0.8%

    Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabiliti…

  3. 6.5CVE-2023-20077EPSS 0.8%

    Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabiliti…

  4. 8.8CVE-2022-20962EPSS 1.1%

    A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file system of an affected device. This vulnerability is due t…

  5. 7.5CVE-2022-25347EPSS 11%

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.

  6. 5.5CVE-2018-10498EPSS 0.4%

    This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target sys…