Path traversal.

rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

• Path traversal
• Broken access control

<1.74.4 · fixed in 1.74.4

rclone: Path traversal in serve s3 allows reading and overwriting root-level files

• Path traversal

<1.74.4 · fixed in 1.74.4

yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversal

• yushine InnoShop
• Path traversal

rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote

• Path traversal

<1.74.4 · fixed in 1.74.4

rclone: Incomplete path validation allows backend root escape in serve restic

• Path traversal

>=1.40.0, <1.75.0 · fixed in 1.75.0

Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header

• GitHub Enterprise Server
• Path traversal

Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download

• Path traversal

>=0.11.0, <0.18.7 || >=0.19.0, <0.19.9 · fixed in 0.18.7, 0.19.9

Improper limitation of a pathname to a restricted directory in aws-transform-mcp-server

• aws-transform-mcp-server
• Path traversal

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

• IBM Langflow OSS
• Path traversal

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

• IBM Langflow OSS
• Path traversal

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

• IBM Langflow OSS
• Path traversal

Path traversal in Jenkins

• Jenkins
• Path traversal

Symlink following in Jenkins

• Jenkins
• Path traversal

Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access

• Cisco Catalyst SD-WAN Controller
• Cisco Catalyst SD-WAN Manager
• Path traversal

Langflow is affected by security vulnerabilities in Model Context Protocol features

• IBM Langflow OSS
• Path traversal

Cross-site scripting in Progress MarkLogic Server Query Console

• Progress Software Corporation MarkLogic Server
• Path traversal
• Cross-site scripting (XSS)

CCleaner local privilege escalation via link following on uninstall

• Gen Digital CCleaner
• Path traversal

Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion

• keywordrush Content Egg – Affiliate Product Importer & Price Comparison
• Path traversal

Fledge IoT Gateway Backup Restore Tar Path Traversal

• fledge
• Path traversal

Zigbee2MQTT External JS Extension Path Traversal Leading to Remote Code Execution

• Koenkk zigbee2mqtt
• Path traversal

OpenPLC Runtime v3 Path Traversal in Structured Text FILE Directive Leading to Arbitrary File Write

• thiagoralves OpenPLC_v3
• Path traversal

Path traversal in Eclipse Foundation Eclipse Mojarra

• Eclipse Foundation Eclipse Mojarra
• Path traversal
• Code injection

Path traversal in Eclipse Foundation Eclipse Theia

• Eclipse Foundation Eclipse Theia
• Path traversal
• Information disclosure

Cross-site request forgery in Eclipse Foundation Eclipse Theia

• Eclipse Foundation Eclipse Theia
• Path traversal
• Authentication bypass

Path traversal in Eclipse Foundation Eclipse Theia

• Eclipse Foundation Eclipse Theia
• Path traversal

art-template - Path Traversal in Sub-Template Resolution via include()/extend()

• art-template
• Path traversal

audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal

• advplyr audiobookshelf
• Path traversal

PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools

• The-Pocket PocketFlow (pocketflow-coding-agent cookbook example)
• Path traversal

Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal

• Custom Fields
• Path traversal

yeqifu warehouse FileController.java path traversal

• yeqifu warehouse
• Path traversal

PathTravelsal Vulnerability in com.talpa.hibrowser

• TECNO Mobile Hi Browser
• Path traversal

ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal

• ZomboDroid Meme Generator App
• Path traversal

Ghost: Theme Upload Path Traversal

• Path traversal

>=0.10.0, <6.54.1 · fixed in 6.54.1

Ghost: Database Backup Path Traversal

• Path traversal

>=1.20.1, <6.54.1 · fixed in 6.54.1

CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writes

• cvat
• Path traversal

Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing

• Path traversal
• Server-side request forgery (SSRF)

<5.2.17 || >=6.0a1, <6.0.8 · fixed in 5.2.17, 6.0.8

Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys

• Path traversal

<3.1.3 · fixed in 3.1.3

Path traversal in NVIDIA Dynamo

• NVIDIA Dynamo
• Path traversal

Path traversal in NVIDIA Triton Inference Server

• NVIDIA Triton Inference Server
• Path traversal

Path traversal in Veeam Service Provider Console

• Veeam Service Provider Console
• Path traversal

OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music

• Microck opencode-studio
• Path traversal

Perspective 5.0.0 Path Traversal via cwd_static_file_handler

• perspective
• Path traversal

Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer

• TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer
• Path traversal

Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources

• Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
• Path traversal

Path traversal in Zyxel ATP series firmware and others

• Zyxel ATP series firmware
• Zyxel USG FLEX series firmware
• Path traversal

Wildfly-core: path traversal on wildfly domain controller

• Red Hat JBoss Enterprise Application Platform 8.1
• Red Hat JBoss Enterprise Application Platform 7
• Path traversal

Path traversal in Rocket.Chat

• Rocket.Chat
• Path traversal

Microsoft Edge for Android Information Disclosure Vulnerability

• Microsoft Edge (Chromium-based)
• Path traversal

Microsoft Edge for Android Information Disclosure Vulnerability

• Microsoft Edge for Android
• Path traversal

Blix Email Blue Mail Calendar App react-native-receive-sharing-intent FileDirectory.getFileFromUri path traversal

• Blix Email Blue Mail Calendar App
• Path traversal

danpros HTMLy Author Name htmly.php path traversal

• danpros HTMLy
• Path traversal

danpros HTMLy Admin Content Endpoint admin.php add_content path traversal

• danpros HTMLy
• Path traversal

GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()

• Path traversal
• Information disclosure

<3.1.57 · fixed in 3.1.57

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

• Path traversal
• Information disclosure

<3.1.57 · fixed in 3.1.57

danpros HTMLy Delete Username Endpoint htmly.php unlink path traversal

• danpros HTMLy
• Path traversal

Symlink following in Dell Monitor driver

• Dell Monitor driver
• Path traversal

PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

• Path traversal
• Information disclosure

<8.5.23 · fixed in 8.5.23

Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions

• Apache Software Foundation Apache Jena Fuseki
• Path traversal

Duplicate Advisory: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure

• Path traversal

* · no fixed version yet

Duplicate Advisory: Grav: Path Traversal in ImageMedium::watermark() — arbitrary file disclosure via publicly-cached images

• Path traversal

=2.0.10 · no fixed version yet