CWE-38: Path Traversal: '\absolute\pathname\here'
Filter
The product accepts input in the form of a backslash absolute path ('\absolute\pathname\here') without appropriate neutralization.
What the weakness is: CWE-38 at MITRE. All weaknesses
Ask an AI about CWE-38
Show the prompt
Explain CWE-38: Path Traversal: '\absolute\pathname\here' and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/38.html and https://cve.bz/cve/cwe/38?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.1CVE-2026-9507EPSS 0.4%
A session fixation vulnerability has been identified in osTicket v1.18.2. This security flaw allows an attacker to hijack a victim’s account by keeping the initial session identifier (OSTSESSID) active after a successful login. The issu…