Advisories · Weakness
CWE-29.
Every Advisory and CVE whose sources give the weakness CWE-29, newest first.
- CVSS 6.3 Medium
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
- CWE-29
<10.5.22 · fixed in 10.5.22
GHSA-46g3-f9r8-xj4v · CVE-2023-2984 - CVSS 9.8 CriticalCritical · CVSS 9+
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
- CWE-29
<2.3.1 · fixed in 2.3.1
GHSA-wjq3-7jxx-whj9 · CVE-2023-2780 - CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
- CWE-29
<2.2.1 · fixed in 2.2.1
GHSA-xg73-94fp-g449 · CVE-2023-1177 - CVSS 4.3 Medium
Path Traversal: '\..\filename' in salesagility/suitecrm
- salesagility/suitecrm
- CWE-29
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file.
- Weintek EasyBuilder Pro cMT
- CWE-29
- CVSS 6.8 Medium
Froxlor is vulnerable to path traversal
- CWE-29
<2.0.0 · fixed in 2.0.0
GHSA-xp3g-2729-rxm3 · CVE-2023-0316 - CVSS 3.9 Low
Emerson Electric Proficy Machine Edition: Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29…
- Emerson Electric Proficy Machine Edition
- CWE-29
- CVSS 6.9 Medium
Path Traversal in com.alibaba.oneagent:one-java-agent-plugin
- Path traversal
- CWE-29
<0.0.2 · fixed in 0.0.2
GHSA-9hr3-j9mc-xmq2 · CVE-2022-25842 - CVSS 9.8 CriticalCritical · CVSS 9+
Exposure of Resource to Wrong Sphere in Zip-Local
- Information disclosure
- CWE-29
<0.3.5 · fixed in 0.3.5
GHSA-wxj7-97fp-j53j · CVE-2021-23484 - CVSS 7.3 High
Calipso Arbitrary File Write via Archive Extraction (Zip Slip)
- Information disclosure
- CWE-29
<=0.3.54 · no fixed version yet
GHSA-jxcc-g75x-qgw9 · CVE-2021-23391 - CVSS 5.5 Medium
Path Traversal in MHolt Archiver
- Path traversal
- CWE-29
>=3.0.0, <3.3.2 · fixed in 3.3.2
GHSA-h74j-692g-48mq · CVE-2019-10743