CWE-35— Path Traversal: '.../...//'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.— MITRE CWE catalog
202 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-35page 4 of 5
- CVE-2024-38706MEDIUMCVSS 6.5EG 6.52024-07-12
Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7.
- CVE-2024-34191MEDIUMCVSS 6.5EG 6.52024-05-14
htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the delete_post() function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request.
- CVE-2023-5885MEDIUMCVSS 6.5EG 6.52023-11-27
The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users.
- CVE-2023-21415MEDIUMCVSS 6.5EG 6.52023-10-16
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operat…
- CVE-2021-1364MEDIUMCVSS 6.5EG 6.52021-01-20
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL inje…
- CVE-2021-1357MEDIUMCVSS 6.5EG 6.52021-01-20
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL inje…
- CVE-2021-1355MEDIUMCVSS 6.5EG 6.52021-01-20
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL inje…
- CVE-2021-1282MEDIUMCVSS 6.5EG 6.52021-01-20
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL inje…
- CVE-2020-5421MEDIUMCVSS 6.5EG 6.52020-09-19
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the us…
- CVE-2025-46256MEDIUMCVSS 6.4EG 6.42026-01-07
Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path Traversal.This issue affects Advanced Database Cleaner PRO: from n/a through 3.2.10.
- CVE-2024-7608MEDIUMCVSS 5.9EG 6.42024-08-27
An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.
- CVE-2025-20320MEDIUMCVSS 6.3EG 6.32025-07-07
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.107, 9.3.2408.117, and 9.2.2406.121, a low-privileged user that does not hold the "admin" or "power" Splunk roles could c…
- CVE-2025-26940MEDIUMCVSS 6.3EG 6.32025-03-15
Path Traversal vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a through 3.8.3.2.
- CVE-2022-46826MEDIUMCVSS 6.2EG 6.22022-12-08
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.
- CVE-2026-21103MEDIUMCVSS 6.1EG 6.12026-09-09
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
- CVE-2025-0858MEDIUMCVSS 5.8EG 5.82025-02-05
A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure.
- CVE-2025-66004MEDIUMCVSS 5.7EG 5.72025-12-10
A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.
- CVE-2025-27445MEDIUMCVSS 5.4EG 5.42025-06-05
A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient san…
- CVE-2025-30966MEDIUMCVSS 5.4EG 5.42025-04-15
Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal. This issue affects WPJobBoard: from n/a through n/a.
- CVE-2023-5800MEDIUMCVSS 5.4EG 5.42024-02-05
Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticati…
- CVE-2026-21092MEDIUMCVSS 5.3EG 5.32026-09-09
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.
- CVE-2025-69325MEDIUMCVSS 5.3EG 5.32026-02-20
Path Traversal: '.../...//' vulnerability in primersoftware Primer MyData for Woocommerce primer-mydata allows Path Traversal.This issue affects Primer MyData for Woocommerce: from n/a through <= 4.2.8.
- CVE-2025-48081MEDIUMCVSS 5.3EG 5.32025-08-27
Path Traversal: '.../...//' vulnerability in Printeers Printeers Print & Ship allows Path Traversal.This issue affects Printeers Print & Ship: from n/a through 1.17.0.
- CVE-2025-46441MEDIUMCVSS 5.3EG 5.32025-05-19
Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through <= 3.3.1.
- CVE-2021-1132MEDIUMCVSS 5.3EG 5.32024-11-18
A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to access sensitive data. This vulnerability exists because the web…
- CVE-2026-32415MEDIUMCVSS 5.0EG 5.02026-03-13
Path Traversal: '.../...//' vulnerability in Bogdan Bendziukov Squeeze squeeze allows Path Traversal.This issue affects Squeeze: from n/a through <= 1.7.7.
- CVE-2024-52885MEDIUMCVSS 5.0EG 5.02025-08-06
The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessibl…
- CVE-2025-64253MEDIUMCVSS 4.9EG 4.92025-12-16
Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-check allows Path Traversal.This issue affects Health Check & Troubleshooting: from n/a through <= 1.7.1.
- CVE-2025-39598MEDIUMCVSS 4.9EG 4.92025-04-16
Path Traversal: '.../...//' vulnerability in Quý Lê 91 Administrator Z administrator-z allows Path Traversal.This issue affects Administrator Z: from n/a through <= 2025.03.28.
- CVE-2025-27274MEDIUMCVSS 4.9EG 4.92025-03-03
Path Traversal: '.../...//' vulnerability in axelkeller GPX Viewer gpx-viewer allows Path Traversal.This issue affects GPX Viewer: from n/a through <= 2.2.11.
- CVE-2025-26357MEDIUMCVSS 4.9EG 4.92025-02-12
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests.
- CVE-2025-26353MEDIUMCVSS 4.9EG 4.92025-02-12
A CWE-35 "Path Traversal" in maxtime/api/sql/sql.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests.
- CVE-2025-26351MEDIUMCVSS 4.9EG 4.92025-02-12
A CWE-35 "Path Traversal" in the template download mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests.
- CVE-2024-52390MEDIUMCVSS 4.9EG 4.92024-11-18
Path Traversal: '.../...//' vulnerability in Greg Ross CYAN Backup cyan-backup allows Path Traversal.This issue affects CYAN Backup: from n/a through <= 2.5.3.
- CVE-2025-59181MEDIUMCVSS 4.8EG 4.82026-07-27
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users.
- CVE-2026-1763MEDIUMCVSS 4.6EG 4.62026-02-10
Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.
- CVE-2026-20513MEDIUMCVSS 4.4EG 4.42026-09-07
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for e…
- CVE-2025-43886MEDIUMCVSS 4.4EG 4.42025-09-10
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem ac…
- CVE-2025-40573MEDIUMCVSS 4.4EG 4.42025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal attacks. This could allow a privileged local attacker to restore backups that are ou…
- CVE-2025-4956MEDIUMCVSS 4.3EG 4.32025-08-30
Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0.
- CVE-2024-47171MEDIUMCVSS 4.3EG 4.32024-09-26
Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead …
- CVE-2024-47170MEDIUMCVSS 4.3EG 4.32024-09-26
Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chosen locations on the server. This issue c…
- CVE-2024-0067MEDIUMCVSS 4.3EG 4.32024-09-10
Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API ledlimit.cgi was vulnerable for path traversal attacks allowing to list folder/file names on the local file system of the Axis device. Axis has released pat…
- CVE-2026-24315MEDIUMCVSS 4.2EG 4.22026-06-09
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires a…
- CVE-2025-52712MEDIUMCVSS 4.2EG 4.22025-08-14
Path Traversal: '.../...//' vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Path Traversal.This issue affects Post and Page Builder by BoldGrid: from n/a through <= 1.27.8.
- CVE-2025-22288MEDIUMCVSS 4.1EG 4.12025-11-06
Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a thro…
- CVE-2026-105683LOWCVSS 3.8EG 3.82026-10-05
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in versio…
- CVE-2026-103290LOWCVSS 3.8EG 3.82026-10-01
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files out…
- CVE-2026-56089LOWCVSS 3.3EG 3.32026-08-17
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
- CVE-2024-1886LOWCVSS 3.0EG 3.02024-02-26
This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.
Map vulnerabilities like CWE-35 to your infrastructure
EchelonGraph correlates every CVE — across CWE-35 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →