CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone al

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d

The WP Job Portal plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation

Sharp is a content management framework built for Laravel as a package. Versions prior to 9.20.0 have a path traversal v

The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an a

The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 2.4

VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary com

The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path

AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities ext

PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmd_unpack in the recipe CLI extracts .praison tar archives u

The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitr

The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file pat

Let's Encrypt client and ACME library written in Go (Lego). Prior to 4.34.0, the webroot HTTP-01 challenge provider in l

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs contains an SFTP root escape caused by prefix-ba

ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality

BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated us

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerabili

NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment hand

OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8

AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the currentDirectory request

HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path t

WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated at

vllm-project/vllm version 0.14.1 contains a vulnerability where the `trust_remote_code=True` parameter is hardcoded in t

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient

A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper val

OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authentic

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service all

An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3 allows authenticated attack

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Dir

Dulwich is a pure-Python implementation of the Git file formats and protocols. Versions starting with 0.10.0 and prior t

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) v

We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path t

PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs w

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom works

Jellyfin is an open source self hosted media server. From 10.9.0 until 10.11.10, the POST /ClientLog/Document endpoint a

FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that allows authe

Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of w

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.65. This

Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows a

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() meth

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lowe

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacke

VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, au

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written ou

In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST /file-upload` in every

Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows a