Path traversal.

MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction

• MikroTik RouterOS
• Path traversal

DeepWiki-Open through commit d92819a Arbitrary File Read via /ws/chat WebSocket

• AsyncFuncAI deepwiki-open
• Path traversal

nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following

• nanocoai NanoClaw
• Path traversal

Cisco Secure Email Gateway Security Hardening Release

• Cisco Secure Email
• Cisco Secure Email and Web Manager
• Path traversal

Apache Storm Nimbus: Path Traversal as the Supervisor User via Unsanitised Blobstore Map Local Name

• Apache Software Foundation Apache Storm Nimbus
• Path traversal

Apache Storm Client: Cross-Tenant Dependency Jar Substitution via Predictable Blob Keys

• Apache Software Foundation Apache Storm Client
• Path traversal

Apache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location

• Apache Software Foundation Apache Storm Nimbus
• Path traversal

Path traversal in Eclipse Foundation Eclipse Embedded CDT (C/C++ Development Tools)

• Eclipse Foundation Eclipse Embedded CDT (C/C++ Development Tools)
• Path traversal

LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

• laradashboard
• Path traversal

File Browser through 2.63.23 Path Traversal via Symlink Alias

• filebrowser
• Path traversal

Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0

• joomshaper.com SP Page Builder (Free and Pro) extension for Joomla
• Path traversal

Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0

• joomshaper.com SP Page Builder (Free and Pro) extension for Joomla
• Path traversal

Path traversal in Contec Co., Ltd. FXA5000 and others

• Contec Co., Ltd. FXA5000
• Contec Co., Ltd. FXA5020
• Path traversal

0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal

• 0x4m4 HexStrike AI
• Path traversal

Path traversal in Contec Co., Ltd. SGA1000

• Contec Co., Ltd. SGA1000
• Path traversal

Path traversal in Paessler PRTG Network Monitor

• Paessler PRTG Network Monitor
• Path traversal

Path traversal in DataEase

• DataEase
• Path traversal

Path traversal in ILIAS

• ILIAS
• Path traversal

Path traversal in Softing Secure Integration Server

• Softing Secure Integration Server
• Path traversal

rustypaste before 0.18.1 Path Traversal via filename header

• orhun rustypaste
• Path traversal

restify node-restify static.js serveStatic path traversal

• node-restify
• Path traversal

Path traversal in Zettlab D6 Ultra

• Zettlab D6 Ultra
• Path traversal

Path traversal in Zettlab D6 Ultra

• Zettlab D6 Ultra
• Path traversal

WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

• WebTotem Backups
• Path traversal

Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal

• CODE MONKEYS PROPOSALS
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

• GitLab
• Path traversal

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

• Path traversal

<9.7.0 · fixed in 9.7.0

Path Traversal in Malcolm

• CISA Malcolm
• Path traversal

libks has path traversal in kws HTTP parser via URI segment overflow

• signalwire libks
• Path traversal
• CWE-697

tarfile hardlink fallback ignores custom extraction filter rejection via None

• Python Software Foundation CPython
• Path traversal

Relative path traversal in the generated file manifest cleanup component in projen

• AWS projen
• Path traversal

WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server

• WAVLINK Technology WN535M1
• WAVLINK Technology WN535M3
• Path traversal

Path traversal in mistralai mistral-vibe

• mistralai mistral-vibe
• Path traversal

Path traversal in mistralai mistral-vibe

• mistralai mistral-vibe
• Path traversal

Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

• hugo
• Path traversal

Path traversal in appleple inc. a-blog cms

• appleple inc. a-blog cms
• Path traversal

UsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion

• stiofansisland UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
• Path traversal

Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input.

• Path traversal

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter

• acyba AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
• Path traversal

rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

• Path traversal

>=1.72.0, <1.75.1 · fixed in 1.75.1

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

• Path traversal
• CWE-281

<1.75.1 · fixed in 1.75.1

rclone: source object names can escape the configured root on upload

• Path traversal

<1.75.1 · fixed in 1.75.1

mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url

• Path traversal
• Server-side request forgery (SSRF)

<0.8.18 · fixed in 0.8.18

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• IBM DataStage on Cloud Pak for Data
• Path traversal

Suricata datasets: save to absolute filename can be bypassed when combined with load command

• OISF suricata
• Path traversal

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• IBM DataStage on Cloud Pak for Data
• Path traversal

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• IBM DataStage on Cloud Pak for Data
• Path traversal

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• IBM DataStage on Cloud Pak for Data
• Path traversal

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• IBM DataStage on Cloud Pak for Data
• Path traversal

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• IBM DataStage on Cloud Pak for Data
• Path traversal

A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem

• IBM Langflow OSS
• Path traversal

IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system

• IBM Db2
• Path traversal

n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

• Path traversal

<1.123.76 || >=2.0.0, <2.37.7 || >=2.38.0, <2.38.2 · fixed in 1.123.76, 2.37.7, 2.38.2

n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

• Path traversal

<1.123.76 || >=2.0.0, <2.37.7 || >=2.38.0, <2.38.2 · fixed in 1.123.76, 2.37.7, 2.38.2

Authenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR600

• TP-Link Systems Inc. TL-MR6400 v8
• TP-Link Systems Inc. Archer MR600
• Path traversal

Duplicate Advisory: Knowns Sandbox Escape: Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem

• Path traversal

* · no fixed version yet

Path traversal in WebPros Plesk

• WebPros Plesk
• Path traversal

knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint

• knowns
• Path traversal

knowns through 0.33.0 Path Traversal via code.find MCP tool

• knowns
• Path traversal

knowns through 0.33.0 Path Traversal via Template Engine

• knowns
• Path traversal