← Back
CWE-35

181 CVEs • Abstraction: Variant

Path Traversal: '.../...//'

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.

JSON object

Loading...

CVEs (181)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-3744
1Html Pages Project
1Html Pages
Nov 21, 2024
May 29, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.