cve.bz

CWE-73: External Control of File Name or Path, page 14

Filter

The product allows user input to control or influence paths or file names that are used in filesystem operations.

What the weakness is: CWE-73 at MITRE

Related attack patterns (CAPEC): 8
  • CAPEC-13 Subverting Environment Variable Values Likelihood: High · Severity: Very High
  • CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic Likelihood: High · Severity: High
  • CAPEC-72 URL Encoding Likelihood: High · Severity: High
  • CAPEC-76 Manipulating Web Input to File System Calls Likelihood: High · Severity: Very High
  • CAPEC-78 Using Escaped Slashes in Alternate Encoding Likelihood: High · Severity: High
  • CAPEC-79 Using Slashes in Alternate Encoding Likelihood: High · Severity: High
  • CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic Likelihood: High · Severity: High
  • CAPEC-267 Leverage Alternate Encoding Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-73, as MITRE names them. Credits.

Ask an AI about CWE-73

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-73: External Control of File Name or Path and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/73.html and https://cve.bz/cve/cwe/73?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.2CVE-2023-26282EPSS 0.2%

    IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system. IBM X-Force ID: 248415.

  2. 4.3CVE-2024-2155EPSS 0.5%

    A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The …

  3. 5.3CVE-2024-2150EPSS 0.6%

    A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may …

  4. 9.8CVE-2024-25117EPSS 0.9%

    php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate …

  5. 4.4CVE-2020-36772EPSS 0.4%

    CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment.

  6. 9.8CVE-2024-0728EPSS 0.7%

    A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument c_cmodel leads to file inclusion. The at…

  7. 6.5CVE-2023-49864EPSS 1.1%

    An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerab…

  8. 6.5CVE-2023-49863EPSS 1.1%

    An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerab…

  9. 6.5CVE-2023-49862EPSS 1.1%

    An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerab…

  10. 7.5CVE-2023-49738EPSS 1.3%

    An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.

  11. 9.8CVE-2023-47862EPSS 1.1%

    A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send a series of HT…

  12. 6.5CVE-2023-47171EPSS 1.1%

    An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.

  13. 8.1CVE-2024-20652EPSS 2.1%

    Windows HTML Platforms Security Feature Bypass Vulnerability

  14. 8.8CVE-2024-0265EPSS 21%

    A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component GET Parameter Handler. The manipulation of the argumen…

  15. 8.2CVE-2023-6569EPSS 0.7%

    External Control of File Name or Path in h2oai/h2o-3

  16. 7.4CVE-2023-36019EPSS 16%

    Microsoft Power Platform Connector Spoofing Vulnerability

  17. 8.8CVE-2023-6618EPSS 0.9%

    A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page …

  18. 7.8CVE-2023-5247EPSS 0.3%

    Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a …

  19. 8.8CVE-2023-40194EPSS 2.0%

    An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters. A specially crafted malicious file can create files at arbitrary locations, w…

  20. 8.8CVE-2023-39542EPSS 3.8%

    A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, which can lead to remote code execution. An attacker needs to trick the user in…

  21. 8.8CVE-2023-35985EPSS 2.7%

    An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitra…

  22. 7.1CVE-2023-34982EPSS 0.2%

    This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

  23. 4.9CVE-2023-46851EPSS 1.6%

    Allura Discussion and Allura Forum importing does not restrict URL values specified in attachments. Project administrators can run these imports, which could cause Allura to read local files and expose them.  Exposing internal files then c…

  24. 6.5CVE-2023-20114EPSS 0.7%

    A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability is due to a lack of inpu…

  25. 7.5CVE-2023-43074EPSS 0.6%

    Dell Unity 5.3 contain(s) an Arbitrary File Creation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by crafting arbitrary files through a request to the server.

  26. 8.8CVE-2023-36634EPSS 0.6%

    An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to…

  27. 8.8CVE-2023-36764EPSS 2.1%

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

  28. 9.8CVE-2023-4634ExploitEPSS 86%

    The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.09. This is due to insufficient controls on file paths being supplied to the 'mla_stream_f…

  29. 8.1CVE-2023-32615EPSS 0.8%

    A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attac…

  30. 9.8CVE-2023-4749EPSS 1.0%

    A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is pos…

  31. 6.0CVE-2023-20234EPSS 0.2%

    A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because ther…

  32. 6.5CVE-2023-35384EPSS 1.6%

    Windows HTML Platforms Security Feature Bypass Vulnerability

  33. 9.8CVE-2023-4191EPSS 0.9%

    A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument page leads to f…

  34. 9.8CVE-2023-3643ExploitEPSS 75%

    A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to i…

  35. 6.5CVE-2023-35308EPSS 1.1%

    Windows MSHTML Platform Security Feature Bypass Vulnerability

  36. 8.1CVE-2023-3256EPSS 0.8%

    Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.

  37. 7.1CVE-2023-28603EPSS 0.2%

    Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions.

  38. 4.4CVE-2023-0008EPSS 0.5%

    A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition.

  39. 6.5CVE-2023-29324EPSS 2.8%

    Windows MSHTML Platform Security Feature Bypass Vulnerability

  40. 7.2CVE-2023-2554EPSS 29%

    External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.

  41. 5.3CVE-2023-30943ExploitEPSS 6.8%

    The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the sy…

  42. 9.8CVE-2023-2152EPSS 1.2%

    A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument…

  43. 6.5CVE-2021-4332EPSS 0.8%

    The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and including 4.1.9 (pro) and 2.0.6 (free). The plugin has a feature to add an "Info Box" to an Elementor created page. This Info B…

  44. 8.1CVE-2023-1105EPSS 0.7%

    External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.

  45. 7.1CVE-2023-1070EPSS 0.8%

    External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.

  46. 9.8CVE-2022-39952ExploitEPSS 99.7%

    A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated …

  47. 7.8CVE-2023-21566EPSS 0.4%

    Visual Studio Elevation of Privilege Vulnerability

  48. 7.8CVE-2023-21800EPSS 1.1%

    Windows Installer Elevation of Privilege Vulnerability

  49. 6.5CVE-2023-0003EPSS 1.3%

    A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

  50. 7.5CVE-2022-43513EPSS 1.0%

    A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2). The affected components allow to rename…