← Back
CWE-22

9,540 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

JSON object

Loading...

CVEs (9,540)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Archiver Project
1Archiver
Nov 21, 2024
Jul 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mis...Show more
mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less
2Adamhathcock
Sharpcompress Project
2Sharpcompress
Sharpcompress
Jun 5, 2026
Jul 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability i...Show more
SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less
1Dotnetzip.semverd Project
1Dotnetzip.semverd
May 6, 2025
Jul 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerabil...Show more
DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less
1Adm Zip Project
1Adm Zip
Nov 21, 2024
Jul 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerabil...Show more
adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less
1Unzipper Project
1Unzipper
Nov 21, 2024
Jul 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerab...Show more
unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less
1Zip4j Project
1Zip4j
Nov 21, 2024
Jul 25, 2018
N/A· v4
6.5 MEDIUM· v3
5.8 MEDIUM· v2
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also kn...Show more
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less
1Jrebel
1Zt Zip
Nov 21, 2024
Jul 25, 2018
N/A· v4
5.5 MEDIUM· v3
5.8 MEDIUM· v2
zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also kn...Show more
zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less
3Codehaus Plexus
DebianRedhat
5Debian Linux
Enterprise LinuxEnterprise Linux Desktop+2 more
Nov 21, 2024
Jul 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is...Show more
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less
1Dotcms
1Dotcms
Nov 21, 2024
Jul 24, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal. When "Bundle" tar.gz archives uploaded to the Push Publishing feature are decompre...Show more
The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal. When "Bundle" tar.gz archives uploaded to the Push Publishing feature are decompressed, the filenames of its contents are not properly checked, allowing for writing files to arbitrary directories on the file system. These archives may be uploaded directly via the administrator panel, or using the CSRF vulnerability (CVE-2017-3187). An unauthenticated remote attacker may perform actions with the dotCMS administrator panel with the same permissions of a victim user or execute arbitrary system commands with the permissions of the user running the dotCMS application.Show less
1Trms
1Tightrope Media Carousel Digital Signage
Nov 21, 2024
Jul 23, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API allows for the downloading of arbitrary files through the use of...Show more
A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API allows for the downloading of arbitrary files through the use of directory traversal sequences, aka CSL-1683.Show less
1Opennetworking
1Onos
Nov 21, 2024
Jul 23, 2018
N/A· v4
5.5 MEDIUM· v3
5.8 MEDIUM· v2
Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can resul...Show more
Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion (overwrite). This attack appear to be exploitable via a specially crafted zip file should be uploaded.Show less
1Mcafee
1Mcafee Web Gateway
Jun 17, 2026
Jul 23, 2018
N/A· v4
9.1 CRITICAL· v3
9.0 HIGH· v2
Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors.
1Markdown Pdf Project
1Markdown Pdf
Nov 21, 2024
Jul 20, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files.
1Redhat
1Certification
Nov 21, 2024
Jul 19, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution.
1Gitlab
1Gitlab
Nov 21, 2024
Jul 18, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import componen...Show more
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.Show less
1Eclipse
1Mojarra
Nov 21, 2024
Jul 18, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from app...Show more
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.Show less
2Debian
Neomutt
2Debian Linux
Neomutt
Nov 21, 2024
Jul 17, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
4Canonical
DebianMutt+1 more
4Debian Linux
MuttNeomutt+1 more
Nov 21, 2024
Jul 17, 2018
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.
1Lightbend
1Play Framework
Nov 21, 2024
Jul 17, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from...Show more
A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from the target server via specially crafted HTTP requests.Show less
1Zeta Producer
1Zeta Producer
Nov 21, 2024
Jul 16, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php...Show more
The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal.Show less