CWE-35— Path Traversal: '.../...//'

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.— MITRE CWE catalog

202 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-35page 3 of 5

CVE-2023-47279HIGHCVSS 7.5EG 7.5
2023-11-30
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying.
CVE-2023-6252HIGHCVSS 7.5EG 7.5
2023-11-22
Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration f…
CVE-2022-48476HIGHCVSS 7.5EG 7.5
2023-04-24
In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
CVE-2022-3693HIGHCVSS 7.5EG 7.5
2023-01-13
Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3.
CVE-2022-2265HIGHCVSS 7.5EG 7.5
2022-09-21
The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25
CVE-2026-0804HIGHCVSS 7.3EG 7.3
2026-05-12
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the inst…
CVE-2023-7263HIGHCVSS 7.3EG 7.3
2024-12-28
Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450) This vulnerabil…
CVE-2025-64676HIGHCVSS 7.2EG 7.2
2025-12-18
'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network.
CVE-2025-58972HIGHCVSS 7.2EG 7.2
2025-11-06
Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode…
CVE-2025-26356HIGHCVSS 7.2EG 7.2
2025-02-12
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (setActive endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests.
CVE-2025-26354HIGHCVSS 7.2EG 7.2
2025-02-12
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (copy endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests.
CVE-2024-27901HIGHCVSS 7.2EG 7.2
2024-04-09
SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users and pass it through to the file API's. Thus, causing a considerable impact on confidentiality, integri…
CVE-2026-5703HIGHCVSS 7.1EG 7.1
2026-10-07
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user ru…
CVE-2026-59909HIGHCVSS 7.1EG 7.1
2026-08-17
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-28265HIGHCVSS 7.1EG 7.1
2026-04-01
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
CVE-2023-21418HIGHCVSS 7.1EG 7.1
2023-11-21
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operato…
CVE-2023-21417HIGHCVSS 7.1EG 7.1
2023-11-21
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw can only be exploited after authenticatin…
CVE-2023-21416HIGHCVSS 7.1EG 7.1
2023-11-21
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web inte…
CVE-2023-43801HIGHCVSS 7.1EG 7.1
2023-10-18
Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP…
CVE-2023-43803HIGHCVSS 7.1EG 7.1
2023-10-18
Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP…
CVE-2022-24774HIGHCVSS 7.1EG 7.1
2022-03-22
CycloneDX BOM Repository Server is a bill of materials (BOM) repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. …
CVE-2022-36928HIGHCVSS 6.1EG 7.1
2023-01-09
Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit this vulnerability to read and write to the Zoom application data directory.
CVE-2026-44414MEDIUMCVSS 6.8EG 6.8
2026-10-13
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1…
CVE-2026-24464MEDIUMCVSS 6.8EG 6.8
2026-05-13
When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files.�…
CVE-2026-0205MEDIUMCVSS 6.8EG 6.8
2026-04-29
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
CVE-2025-24908MEDIUMCVSS 6.8EG 6.8
2025-04-16
Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location th…
CVE-2025-24907MEDIUMCVSS 6.8EG 6.8
2025-04-16
Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location th…
CVE-2025-26876MEDIUMCVSS 6.8EG 6.8
2025-02-25
Path Traversal: '.../...//' vulnerability in CodeManas Search with Typesense search-with-typesense allows Path Traversal.This issue affects Search with Typesense: from n/a through <= 2.0.8.
CVE-2024-5481MEDIUMCVSS 6.8EG 6.8
2024-06-07
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.8.23 via the esc_dir function. This makes it possible for authenticated attackers to …
CVE-2024-2654MEDIUMCVSS 6.8EG 6.8
2024-04-09
The File Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.2.5 via the fm_download_backup function. This makes it possible for authenticated attackers, with administrator access and a…
CVE-2026-26124MEDIUMCVSS 6.7EG 6.7
2026-03-05
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.
CVE-2025-5454MEDIUMCVSS 6.7EG 6.7
2025-11-11
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the inst…
CVE-2025-20313MEDIUMCVSS 6.7EG 6.7
2025-09-24
Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break …
CVE-2023-41793MEDIUMCVSS 6.7EG 6.7
2024-03-19
: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and downloading them outside the allowed directories. This issue affects Pandora FMS: from 700…
CVE-2026-85310MEDIUMCVSS 6.5EG 6.5
2026-09-10
import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.
CVE-2026-66695MEDIUMCVSS 6.5EG 6.5
2026-08-06
Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.
CVE-2026-49779MEDIUMCVSS 6.5EG 6.5
2026-07-02
Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal. This issue affects Tax Exempt for WooCommerce: from n/a before 1.9.5.
CVE-2025-28973MEDIUMCVSS 6.5EG 6.5
2025-12-31
Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through <= 2.0.
CVE-2025-8051MEDIUMCVSS 6.5EG 6.5
2025-10-20
Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2.
CVE-2025-43907MEDIUMCVSS 6.5EG 6.5
2025-10-07
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7…
CVE-2025-53561MEDIUMCVSS 6.5EG 6.5
2025-08-20
Path Traversal: '.../...//' vulnerability in miniOrange Prevent files / folders access prevent-file-access allows Path Traversal.This issue affects Prevent files / folders access: from n/a through <= 2.6.0.
CVE-2025-32950MEDIUMCVSS 6.5EG 6.5
2025-04-22
Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix…
CVE-2025-26355MEDIUMCVSS 6.5EG 6.5
2025-02-12
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to delete sensitive files via crafted HTTP requests.
CVE-2025-26352MEDIUMCVSS 6.5EG 6.5
2025-02-12
A CWE-35 "Path Traversal" in the template deletion mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to delete sensitive files via crafted HTTP requests.
CVE-2024-56213MEDIUMCVSS 6.5EG 6.5
2024-12-31
Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.7.
CVE-2024-54313MEDIUMCVSS 6.5EG 6.5
2024-12-13
Path Traversal vulnerability in FULL. FULL Customer allows Path Traversal.This issue affects FULL Customer: from n/a through 3.1.25.
CVE-2024-10857MEDIUMCVSS 6.5EG 6.5
2024-11-26
The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9 via the handle_downloads() function due to insufficient file path validation/sanitization. This ma…
CVE-2024-41972MEDIUMCVSS 6.5EG 6.5
2024-11-18
A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.
CVE-2024-49258MEDIUMCVSS 6.5EG 6.5
2024-10-16
Path Traversal: '.../...//' vulnerability in Limbcode WordPress Gallery Plugin – Limb Image Gallery limb-gallery.This issue affects WordPress Gallery Plugin – Limb Image Gallery: from n/a through <= 1.5.7.
CVE-2024-45190MEDIUMCVSS 6.5EG 6.5
2024-08-23
Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request

Map vulnerabilities like CWE-35 to your infrastructure

EchelonGraph correlates every CVE — across CWE-35 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →