CWE-35— Path Traversal: '.../...//'

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.— MITRE CWE catalog

202 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-35page 2 of 5

CVE-2025-49296HIGHCVSS 8.1EG 8.1
2025-06-09
Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through <= 1.6.
CVE-2025-49295HIGHCVSS 8.1EG 8.1
2025-06-09
Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through <= 2.1.
CVE-2025-39475HIGHCVSS 8.1EG 8.1
2025-06-09
Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: from n/a through <= 6.0.3.
CVE-2025-27010HIGHCVSS 8.1EG 8.1
2025-05-19
Path Traversal: '.../...//' vulnerability in bslthemes Tastyc tastyc allows PHP Local File Inclusion.This issue affects Tastyc: from n/a through < 2.5.2.
CVE-2025-39491HIGHCVSS 8.1EG 8.1
2025-05-16
Path Traversal vulnerability in WHMPress WHMpress allows Path Traversal. This issue affects WHMpress: from 6.2 through revision.
CVE-2025-39470HIGHCVSS 8.1EG 8.1
2025-04-18
Path Traversal: '.../...//' vulnerability in ThimPress Ivy School ivy-school allows PHP Local File Inclusion.This issue affects Ivy School: from n/a through <= 1.6.0.
CVE-2024-54362HIGHCVSS 8.1EG 8.1
2025-03-28
Path Traversal: '.../...//' vulnerability in boggibill GetShop ecommerce getshop-ecommerce allows Path Traversal.This issue affects GetShop ecommerce: from n/a through <= 1.3.
CVE-2025-25122HIGHCVSS 8.1EG 8.1
2025-03-03
Path Traversal: '.../...//' vulnerability in hashshop WizShop wizshop allows Path Traversal.This issue affects WizShop: from n/a through <= 3.0.2.
CVE-2025-24685HIGHCVSS 8.1EG 8.1
2025-01-27
Path Traversal: '.../...//' vulnerability in Ihor Kit Morkva UA Shipping morkva-ua-shipping allows PHP Local File Inclusion.This issue affects Morkva UA Shipping: from n/a through <= 1.0.18.
CVE-2024-41973HIGHCVSS 8.1EG 8.1
2024-11-18
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.
CVE-2025-49405HIGHCVSS 4.3EG 8.1
2025-08-28
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4.
CVE-2023-7300HIGHCVSS 8.0EG 8.0
2024-12-26
Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or the file permission to be changed.(Vulnerability ID:HWPSIRT-2023-60613)
CVE-2025-60835HIGHCVSS 7.8EG 7.8
2026-07-22
An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.
CVE-2026-44933HIGHCVSS 7.8EG 7.8
2026-05-20
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed pa…
CVE-2026-42274HIGHCVSS 7.8EG 7.8
2026-05-08
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs rule matching on the raw (non-normalized) request path, while downstream components may normalize dot-segments…
CVE-2025-47176HIGHCVSS 7.8EG 7.8
2025-06-10
'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally.
CVE-2023-43802HIGHCVSS 7.8EG 7.8
2023-10-18
Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` which handles request with the `filename` parameter. A user who has the ability to perform HTTP requests to the localho…
CVE-2025-67914HIGHCVSS 7.7EG 7.7
2026-01-08
Path Traversal: '.../...//' vulnerability in beeteam368 VidMov vidmov allows Path Traversal.This issue affects VidMov: from n/a through <= 2.3.8.
CVE-2025-30014HIGHCVSS 7.7EG 7.7
2025-04-08
SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a hi…
CVE-2024-54216HIGHCVSS 7.7EG 7.7
2024-12-06
Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms allows Path Traversal. This issue affects ARForms: from n/a before 7.0.2.
CVE-2024-49770HIGHCVSS 7.7EG 7.7
2024-11-01
`oak` is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. By default `oak` does not allow transferring of hidden files with `Context.send` API. However, prior to version…
CVE-2024-2863HIGHCVSS 5.3EG 7.6
2024-03-25
This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.
CVE-2026-39734HIGHCVSS 7.5EG 7.5
2026-10-30
Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.
CVE-2026-97244HIGHCVSS 7.5EG 7.5
2026-09-30
Contributor Path Traversal in Creator LMS <= 1.2.19 versions.
CVE-2026-27557HIGHCVSS 7.5EG 7.5
2026-09-16
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read.
CVE-2026-28157HIGHCVSS 7.5EG 7.5
2026-08-13
Subscriber Path Traversal in Do Lasso <= 358 versions.
CVE-2026-69109HIGHCVSS 7.5EG 7.5
2026-08-11
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attack…
CVE-2026-49112HIGHCVSS 7.5EG 7.5
2026-06-15
Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.
CVE-2026-25397HIGHCVSS 7.5EG 7.5
2026-03-25
Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for WooCommerce: from n/a through <= 1.0.4.
CVE-2025-68428HIGHCVSS 7.5EG 7.5
2026-01-05
jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsaniti…
CVE-2025-48317HIGHCVSS 7.5EG 7.5
2025-09-05
Path Traversal: '.../...//' vulnerability in Stefan Keller WooCommerce Payment Gateway for Saferpay woocommerce-payment-gateway-for-saferpay allows Path Traversal.This issue affects WooCommerce Payment Gateway for Saferpay: from n/a throug…
CVE-2025-52805HIGHCVSS 7.5EG 7.5
2025-07-04
Path Traversal: '.../...//' vulnerability in VaultDweller Leyka leyka allows PHP Local File Inclusion.This issue affects Leyka: from n/a through <= 3.32.1.
CVE-2025-49451HIGHCVSS 7.5EG 7.5
2025-06-17
Path Traversal: '.../...//' vulnerability in yannisraft Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery aeroscroll-gallery allows Path Traversal.This issue affects Aeroscroll Gallery – Infinite Scroll …
CVE-2025-39492HIGHCVSS 7.5EG 7.5
2025-05-16
Path Traversal vulnerability in WHMPress WHMpress allows Relative Path Traversal. This issue affects WHMpress: from 6.2 through revision.
CVE-2025-47636HIGHCVSS 7.5EG 7.5
2025-05-07
Path Traversal: '.../...//' vulnerability in Fernando Briano List category posts list-category-posts allows PHP Local File Inclusion.This issue affects List category posts: from n/a through <= 0.91.0.
CVE-2025-32585HIGHCVSS 7.5EG 7.5
2025-04-11
Path Traversal: '.../...//' vulnerability in Trusty Plugins Shop Products Filter trusty-woo-products-filter allows PHP Local File Inclusion.This issue affects Shop Products Filter: from n/a through <= 1.2.
CVE-2025-30834HIGHCVSS 7.5EG 7.5
2025-04-01
Path Traversal: '.../...//' vulnerability in Bit Apps Bit Assist bit-assist allows Path Traversal.This issue affects Bit Assist: from n/a through <= 1.5.4.
CVE-2025-26935HIGHCVSS 7.5EG 7.5
2025-02-25
Path Traversal: '.../...//' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through <= 2.2.8.
CVE-2025-22205HIGHCVSS 7.5EG 7.5
2025-02-04
Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x.
CVE-2025-22786HIGHCVSS 7.5EG 7.5
2025-01-15
Path Traversal: '.../...//' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows PHP Local File Inclusion.This issue affects ElementInvader Addons for Elementor: from n/a through <…
CVE-2024-12088HIGHCVSS 7.5EG 7.5
2025-01-14
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulne…
CVE-2024-12087HIGHCVSS 7.5EG 7.5
2025-01-14
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client.…
CVE-2024-52498HIGHCVSS 7.5EG 7.5
2024-11-28
Path Traversal: '.../...//' vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows PHP Local File Inclusion.This issue affects SP Blog Designer: from n/a through <= 1.0.0.
CVE-2024-50054HIGHCVSS 7.5EG 7.5
2024-11-22
The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system.
CVE-2020-26073HIGHCVSS 7.5EG 7.5
2024-11-18
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory …
CVE-2024-51582HIGHCVSS 7.5EG 7.5
2024-11-04
Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects WP Hotel Booking: from n/a through <= 2.2.9.
CVE-2024-45248HIGHCVSS 7.5EG 7.5
2024-10-06
Multi-DNC – CWE-35: Path Traversal: '.../...//'
CVE-2024-47324HIGHCVSS 7.5EG 7.5
2024-10-05
Path Traversal: '.../...//' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vertical and Horizontal timeline plugin: from n/a through <= 3.6.7.
CVE-2024-0113HIGHCVSS 7.5EG 7.5
2024-08-12
NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation…
CVE-2024-36991HIGHCVSS 7.5EG 7.5
2024-07-01
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterpris…

Map vulnerabilities like CWE-35 to your infrastructure

EchelonGraph correlates every CVE — across CWE-35 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →