Path Traversal: '../filedir'
CWE-24
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize../ sequences that can resolve to a location that is outside of that directory.
The../ manipulation is the canonical manipulation for operating systems that use / as directory separators, such as UNIX- and Linux-based systems. In some cases, it is useful for bypassing protection schemes in environments for which / is supported but not the primary separator, such as Windows, which uses but can also accept /.
We track 63 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.3. 1 has been exploited in real attacks.
How this weakness is prevented
- Implementation: Inputs should be decoded and canonicalized to the application's current internal representation before being validated (CWE-180). Make sure that the application does not decode the same input twice (CWE-174). Such errors could be used to bypass allowlist validation schemes by introducing dangerous inputs after they have been checked.
Latest Path Traversal: '../filedir' vulnerabilities
- 7.5 High severity
g5_digital_fault_recorder: Path Traversal: '../filedir'
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Directory traversal can occur via the system logs download mechanism.
- 7.3 High severity
PandaX: Path Traversal: '../filedir'
A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack
- 9.8 Critical severity
PandaX: Path Traversal: '../filedir'
A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical. This vulnerability affects the function DeleteImage of the file /apps/system/router/upload.go. The manipulation of the argument fileName with the input ../../../../../
- 7.5 High severity
ZKBio Media: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName wit
- 9.8 Critical severity
KuERP: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function del_sn_db of the file /application/index/controller/Service.php. The manipulation of the argument file l
- 7.5 High severity
LinkWechat: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in qwdigital LinkWechat 5.1.0. It has been classified as problematic. This affects an unknown part of the file /linkwechat-api/common/download/resource of the component Universal Download Interface. The manipulation of the argument na
- 7.8 High severity
atril: Improper Limitation of a Pathname to a Restricted Directory
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhe
- 9.8 Critical severity
DSShop: Path Traversal: '../filedir'
A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The manipulation of the argument member_info leads to path traversal: '../filedir'.
- 9.8 Critical severity
DSMall: Path Traversal: '../filedir'
A vulnerability, which was classified as critical, has been found in DeShang DSMall up to 5.0.3. Affected by this issue is some unknown functionality of the file application/home/controller/MemberAuth.php. The manipulation of the argument file_name leads to pa
- 7.5 High severity
WP Compress – Instant Performance & Speed…: Improper Limitation of a Pathname to a Restricted Directory
The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.10.33 via the css parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary
- 7.5 High severity
download-station: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue affects some unknown processing of the file index.php. The manipulation of the argument f leads to path traversal: '../filedir'. The attack
- 7.5 High severity
Inis: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to pa
- 9.8 Critical severity
Medicine Tracking System: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument page leads to path traversal: '../filedir'. The attack may be initiated remote
- 9.8 Critical severity
Simple Student Attendance System: Path Traversal: '../filedir'
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument page leads to path traversal: '../filedir'. The att
- 9.1 Critical severity
DashMachine: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4. Affected by this issue is some unknown functionality of the file /settings/delete_file. The manipulation of the argument file leads to path traversal: '../filed
- 7.5 High severity
OTCMS: Path Traversal: '../filedir'
A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has bee
- 7.8 High severity
youker-assistant: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restore_all_sound_file. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been di
- 9.8 Critical severity
YFCMF: Path Traversal: '../filedir'
A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The a
- 9.8 Critical severity
YFCMF: Path Traversal: '../filedir'
A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has be
- 9.8 Critical severity
go-fastdfs: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in sjqzhang go-fastdfs up to 1.4.3. Affected by this issue is the function upload of the file /group1/uploa of the component File Upload Handler. The manipulation leads to path traversal: '../fi
- 8.8 High severity
TeaCMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The ex
- 7.5 High severity
growthbook: Improper Limitation of a Pathname to a Restricted Directory
GrowthBook is an open-source platform for feature flagging and A/B testing. With some self-hosted configurations in versions prior to 2022-08-29, attackers can register new accounts and upload files to arbitrary directories within the container. If the attacke
- 9.8 Critical severity
Keysight Technologies Sensor Management Server: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.