Path traversal.

Prime Mover < 2.2.1 Path Traversal via wprime-config.json

• Codexonics Prime Mover
• Path traversal

Prime Mover < 2.2.1 Zip Slip Path Traversal File Write

• Codexonics Prime Mover
• Path traversal

Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)

• foundation50 classroom50
• Path traversal

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

• Path traversal
• Broken access control

<3.11.7 · fixed in 3.11.7

WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability

• AcyMailing Newsletter Team AcyMailing SMTP Newsletter
• Path traversal

Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory

• Red Hat Ansible Automation Platform 2
• Path traversal

Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe

• Ghost
• Path traversal

n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node

• n8n
• Path traversal

n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase

• n8n
• Path traversal

n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation

• n8n
• Path traversal

Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter

• WebRehab Super Forms – Drag & Drop Form Builder
• Path traversal

Path traversal in Fujifilm Business Innovation Corp. Apeos 3060 / 2560 / 1860 Japan model and others

• Fujifilm Business Innovation Corp. Apeos 3060 / 2560 / 1860 Japan model
• Fujifilm Business Innovation Corp. Apeos 3061 / 2561 / 2061 Japan model
• Path traversal

Path traversal in dynamically created BACnet File Objects

• WAGO 0751-9x01
• WAGO 0750-811x-xxxx-xxxx
• Path traversal

Cache Enabler < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion via cache_enabler_clear_page_cache_by_url

• Cache Enabler
• Path traversal

BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key

• BackupSheep WordPress Backup Plugin
• Path traversal

Path traversal may allow arbitrary files to be viewed, created, modified, or deleted

• Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
• Path traversal

Genians, Inc Genian NAC/ZTNA Remote Code Execution

• Genians, Inc Genian NAC 4.0.175 Release
• Genians, Inc Genian NAC 5.0.65 LTS Release
• Path traversal
• Broken access control

David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

• David-Crty databasement
• Path traversal

langflow-ai langflow v1.8.4 is affected by: Directory Traversal.

• Path traversal

The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal.

• Path traversal

The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal.

• Path traversal

The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal.

• Path traversal

deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute.

• Path traversal

In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace, potentially compro…

• Path traversal

In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace.

• Path traversal

Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside the intended project workspace.

• Path traversal

Tornado: StaticFileHandler follows symlinks outside static root (path traversal)

• Path traversal

<6.5.9 · fixed in 6.5.9

GitPython submodule update path traversal can write outside the repository

• Path traversal

<3.1.62 · fixed in 3.1.62

DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file

• AsyncFuncAI deepwiki-open
• Path traversal

Yonyou U8 CRM Arbitrary File Read via getemaildata.php

• Yonyou U8 CRM
• Path traversal

Inspur HCM Cloud Arbitrary File Read via file/download Endpoint

• Inspur Haiyue HCM Cloud
• Path traversal

Kiteworks Core Local Privilege Escalation

• Kiteworks Core
• Path traversal
• Privilege escalation

Kiteworks Email Protection Gateway Path Traversal

• Kiteworks Email Protection Gateway
• Path traversal
• Other injection

Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation

• Kiteworks Core
• Path traversal
• Privilege escalation

Kiteworks Email Protection Gateway Path Traversal

• Kiteworks Email Protection Gateway
• Path traversal

Kiteworks Core Path Traversal

• Kiteworks Core
• Path traversal

Kiteworks Core Privilege Escalation through External Control of File Name or Path

• Kiteworks Core
• Path traversal
• Privilege escalation

Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection

• Kiteworks Email Protection Gateway
• Path traversal

Kiteworks Email Protection Gateway remote code execution

• Kiteworks Email Protection Gateway
• Path traversal
• Code injection

Kiteworks Core arbitrary file write

• Kiteworks Core
• Path traversal

Kiteworks Email Protection Gateway path traversal

• Kiteworks Email Protection Gateway
• Path traversal

ZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_path

• ZeroClaw
• Path traversal

OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path

• Liquid-co OpenSave
• Path traversal

Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction

• Assisted Installer for Red Hat OpenShift Container Platform 2
• Red Hat OpenShift Container Platform 4
• Path traversal

WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability

• WPFunnels Creator LMS
• Path traversal

WordPress WEBO MCP plugin <= 3.0.18 - Arbitrary File Deletion vulnerability

• phuongwebo WEBO MCP
• Path traversal

WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability

• envato Template Kit – Import
• Path traversal

WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability

• Syed Balkhi NextGEN Gallery
• Path traversal

Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation

• Cato Networks SDP Client
• Path traversal
• Weak cryptography or TLS

Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation

• Cato Networks SDP Client
• Path traversal

DigiWin｜EasyFlow .NET - Arbitrary File Read

• DigiWin EasyFlow .NET
• Path traversal

Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design

• productdesignerapp Product Designer App
• Path traversal

EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler

• EWWW Image Optimizer
• Path traversal

Symlink following in PFU Limited Image Scanner Driver for Linux (fi Series) and others

• PFU Limited Image Scanner Driver for Linux (fi Series)
• PFU Limited Image Scanner Driver for Linux (SP Series)
• Path traversal

gedelumbung HospitalManagement Endpoint data_galeri.php hapus path traversal

• gedelumbung HospitalManagement
• Path traversal

Path traversal in jknack handlebars.java

• jknack handlebars.java
• Path traversal

DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_api.py:42).

• Path traversal

DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:40).

• Path traversal

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py.

• Path traversal

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:290).

• Path traversal