Path traversal.

FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter

• perber leafwiki
• Path traversal

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

• Path traversal

>=0.19.8, <0.45.0 · fixed in 0.45.0

Runtipi: Authenticated arbitrary file write via backup restore symlink planting

• runtipi
• Path traversal
• CWE-61

Duplicate Advisory: ONNX: TOCTOU arbitrary file read/write in save_external_dat

• Path traversal

<=1.20.1 · no fixed version yet

Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories

• zanllp infinite-image-browsing
• Path traversal

Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator

• zanllp infinite-image-browsing
• Path traversal

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

• lxc incus
• Path traversal

Incus vulnerable to root RCE via image backup.yaml symlink

• lxc incus
• Path traversal
• CWE-61

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66

• yootheme.com Zoo extension for Joomla
• Path traversal

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40

• yootheme.com YOOtheme Pro extension for Joomla
• Path traversal

JuiceFS Local Filestore Backend Joins Object Keys onto the Storage Root Without a Containment Check, Allowing Writes Outside the Configured Directory

• juicedata juicefs
• Path traversal

SiYuan before v3.7.4 Path Traversal via packageName

• siyuan
• Path traversal

Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library

• misp-stix
• Path traversal

Datiphy Data Management Center - External Control of File Name or Path

• Datiphy Inc. Data Management Center
• Path traversal

Path Traversal Vulnerability in apport-unpack

• Canonical Apport
• Path traversal

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Path traversal

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Path traversal

Azure Logic Apps Elevation of Privilege Vulnerability

• Microsoft Azure Logic Apps
• Path traversal

Microsoft Fabric Elevation of Privilege Vulnerability

• Microsoft Fabric
• Path traversal

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Path traversal

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Path traversal

Dockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion

• louislam dockge
• Path traversal

Path traversal in Apple container

• Apple container
• Path traversal

Winter: Local File Inclusion through =include directives in JavaScript asset compilation

• Path traversal
• Information disclosure

<1.2.13 · fixed in 1.2.13

Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

• Path traversal

<1.2.13 · fixed in 1.2.13

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

• Path traversal
• Information disclosure

<2.1.5 · fixed in 2.1.5

Laravel Backpack CRUD: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk

• Path traversal
• Broken access control

>=5.0.0 || >=6.0.0, <6.8.12 || >=7.0.0, <7.0.35 · fixed in 6.8.12, 7.0.35

next-video: Unauthenticated arbitrary file read via /api/video request handler

• Path traversal
• Information disclosure

<2.8.1 · fixed in 2.8.1

libgit2: Submodule path traversal

• libgit2
• Path traversal

Mongoose: Path traversal in SSI #include directives enables arbitrary file read

• cesanta mongoose
• Path traversal

Velero vulnerable to file path traversal when extracting from backup's tarball

• Path traversal

<1.18.1 · fixed in 1.18.1

Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy

• Red Hat OpenShift Container Platform 4
• Red Hat OpenShift Container Platform 5
• Path traversal

Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability

• Heimdall Data Database Proxy
• Path traversal

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability

• Kenwood DNR1007XR
• Path traversal

Apache InLong: Agent path traversal via unvalidated file source path

• Apache Software Foundation Apache InLong
• Path traversal

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Path traversal

Arbitrary file overwrite vulnerability in DigiDoc4 client

• Estonian Information System Authority (RIA) DigiDoc4
• Path traversal

Path Traversal in ATutor

• ATutor
• Path traversal

Path Traversal leading to Remote Code Execution in ATutor

• ATutor
• Path traversal

Path Traversal in ATutor

• ATutor
• Path traversal

n8n before 2.34.1 Remote Code Execution via Path Traversal

• n8n
• Path traversal

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file

• Frauscher Sensortechnik FDS 102
• Path traversal

Agno PythonTools Path Traversal via joinpath file_name argument

• Agno
• Path traversal

Path Traversal through Automation Broker in Splunk SOAR

• Splunk SOAR
• Path traversal

Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR

• Splunk SOAR
• Path traversal

Path Traversal through App Installation Tar Extraction in Splunk SOAR

• Splunk SOAR
• Path traversal

Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR

• Splunk SOAR
• Path traversal

Path Traversal through Knowledge Bundle Replication in Splunk Enterprise

• Splunk Enterprise
• Path traversal

Path Traversal through Splunk Web Static File Serving in Splunk Enterprise

• Splunk Enterprise
• Path traversal

DS8900F and DS8A00 Information Disclosure

• IBM DS8A00 (R10.0 - R10.1)
• IBM DS8900F (R9.4)
• Path traversal

logto-tunnel serves files outside `--experience-path` via path traversal

• Path traversal

<0.3.9 · fixed in 0.3.9

IBM OpenBMC Code Execution

• IBM OPENBMC
• Path traversal

yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal

• yangzongzhuan RuoYi-Vue
• Path traversal

BuildKit: Malicious client can bypass destination directory validation on local sources upload

• moby buildkit
• Path traversal

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Path traversal

Copier has a trust-prefix bypass via path traversal that runs tasks unprompted

• Path traversal
• Code injection

>=9.5.0, <9.15.2 · fixed in 9.15.2

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

• Path traversal
• Information disclosure

<5.7.2 · fixed in 5.7.2

faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

• Path traversal
• Information disclosure

<2.1.3 · fixed in 2.1.3

grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

• Path traversal
• Information disclosure

<1.5.3 · fixed in 1.5.3

Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager

• wazuh
• Path traversal