Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVEs (9,562)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-5803 1Marvell 1Qconvergeconsole Jun 17, 2026 Dec 18, 2020 N/A· v4 8.1 HIGH· v3 8.5 HIGH· v2 Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk as SYSTEM or root.
CVE-2020-20277 1Troglobit 1Uftpd Jun 17, 2026 Dec 18, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath func...Show more There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read or write to arbitrary files on the filesystem, leak process memory, or potentially lead to remote code execution.Show less
CVE-2020-8463 1Trendmicro 1Interscan Web Security Virtual Appliance Jun 17, 2026 Dec 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths.
CVE-2020-25617 1Solarwinds 1N Central Jun 17, 2026 Dec 16, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of...Show more An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root.Show less
CVE-2020-5683 1Weseek 1Growi Jun 17, 2026 Dec 16, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versio...Show more Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to alter the data by uploading a specially crafted file.Show less
CVE-2020-35460 2Mpxj Oracle 2Mpxj Primavera Unifier Jun 17, 2026 Dec 14, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.
CVE-2020-5639 1Soliton 1Filezen Jun 17, 2026 Dec 14, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be...Show more Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed.Show less
CVE-2020-35176 3Awstats DebianFedoraproject 3Awstats Debian LinuxFedora Jun 17, 2026 Dec 12, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issu...Show more In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.Show less
CVE-2020-27730 2F5 Netapp 2Cloud Backup Nginx Controller Jun 17, 2026 Dec 11, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.
CVE-2020-7790 1Spatie 1Browsershot Jun 17, 2026 Dec 11, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF.
CVE-2020-7535 1Schneider Electric 21140cpu65150 Firmware 140cpu65160 Firmware140noc77101 Firmware+18 more Jun 17, 2026 Dec 11, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and as...Show more A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.Show less
CVE-2020-26837 1Sap 1Solution Manager Jun 17, 2026 Dec 9, 2020 N/A· v4 9.1 CRITICAL· v3 6.5 MEDIUM· v2 SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can exploit an existing path traversal vulnerability to compromise confidentiality expo...Show more SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can exploit an existing path traversal vulnerability to compromise confidentiality exposing elements of the file system, partially compromise integrity allowing the modification of some configurations and partially compromise availability by making certain services unavailable.Show less
CVE-2020-27896 1Apple 2Mac Os X Macos Jun 17, 2026 Dec 8, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to modify the file system.
CVE-2020-10014 1Apple 2Mac Os X Macos Jun 17, 2026 Dec 8, 2020 N/A· v4 6.3 MEDIUM· v3 4.3 MEDIUM· v2 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to break out of its sandbox.
CVE-2020-10010 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Dec 8, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges.
CVE-2020-29600 3Awstats DebianFedoraproject 3Awstats Debian LinuxFedora Jun 17, 2026 Dec 7, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete f...Show more In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.Show less
CVE-2020-29529 1Hashicorp 1Go Slug Jun 17, 2026 Dec 3, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific constructions of multiple symlinks. Fixed in 0.5.0.
CVE-2020-28993 1Atx 1Minicmts200a Firmware Jun 17, 2026 Dec 1, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve ad...Show more A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request.Show less
CVE-2020-29373 1Linux 1Linux Kernel Jun 17, 2026 Nov 28, 2020 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locatio...Show more An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.Show less
CVE-2017-15684 1Craftercms 1Crafter Cms Jul 9, 2026 Nov 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.

Previous 1...294295296...479 Next