地图 / 路径遍历路径遍历
Path Traversal · 路径遍历
路径遍历 / 路径遍历
243公开报告
—CWE 编号
0已标注发现方式
243关联报告
发现方式分布
暂无发现方式标注。
关联报告
Arbitrary file read via the UploadsRewriter when moving and issueGitLab · 2020-04-27 · 高危 · $20,000 · 1,503 票Arbitrary file read via the bulk imports UploadsPipelineGitLab · 2022-03-21 · 高危 · $29,000 · 329 票Misuse of an authentication cookie combined with a path traversal on app.starbucks.com permitted access to restricted dataStarbucks · 2020-06-16 · 高危 · 239 票Arbitrary file read during project importGitLab · 2021-05-24 · 高危 · $16,000 · 194 票Burp Suite Professional: browser-powered crawl can write attacker-controlled files through file input handlingPortSwigger Web Security · 2026-06-14 · 中危 · $5,000 · 176 票Path traversal in filename in LINE Mac clientLY Corporation · 2020-07-31 · 中危 · 175 票Mozilla VPN Clients: RCE via file write and path traversalMozilla · 2025-07-29 · 中危 · $6,000 · 173 票RCE as Admin defeats WordPress hardening and file permissionsWordPress · 2020-06-09 · 高危 · 164 票[portswigger.net] Path Traversal al /cms/audioitemsPortSwigger Web Security · 2024-04-04 · 中危 · 146 票Zero day path traversal vulnerability in Grafana 8.x allows unauthenticated arbitrary local file readAiven Ltd · 2021-12-14 · 中危 · $1,000 · 105 票Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49Internet Bug Bounty · 2021-11-09 · 高危 · $4,000 · 96 票Path traversal in Nuget Package RegistryGitLab · 2022-06-07 · 中危 · $12,000 · 88 票Avatar upload allows arbitrary file overwritingMail.ru · — · 未评级 · $750 · 88 票Vanilla Forums AddonManager getSingleIndex Directory Traversal File Inclusion Remote Code Execution VulnerabilityVanilla · — · 未评级 · $900 · 84 票Korea - LFI via path traversal at https://msr.istarbucks.co.kr:6443/appif/Starbucks · 2020-03-10 · 高危 · 81 票File writing by Directory traversal at actionpack-page_caching and RCE by itRuby on Rails · 2020-07-13 · 中危 · $1,000 · 80 票PUT Based CSRF via Client Side Path Traversal + Cookie Bomb on Acronis CloudAcronis · — · 未评级 · $600 · 76 票Path traversal lead to LFR via [CVE-2019-3394]Mail.ru · — · 未评级 · 74 票CVE-2020-3187 - Unauthenticated Arbitrary File DeletionU.S. Dept Of Defense · 2020-09-21 · 高危 · 70 票Unauthenticated LFI (Local File Inclusion) using the symbol `!` At the target `https://████/`U.S. Dept Of Defense · 2024-10-25 · 中危 · 69 票LFI to steal /etc/passwd - Bypass filter in the <meta property="og:image"> tag via redirect and much moreBugPoC · — · 未评级 · $100 · 69 票jitsi-call-analytics: Unauthenticated arbitrary file write via path traversal in `/api/v1/uploads/analyze`8x8 · 2026-07-02 · 低危 · $100 · 68 票Path traversal by monkey-patching Buffer internalsInternet Bug Bounty · 2024-05-29 · 中危 · $2,430 · 67 票Path traversal in deeplink query parameter can expose any user's private info to a public directory (one click)Basecamp · 2024-07-09 · 低危 · 65 票Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet LibraryNextcloud · 2025-10-16 · 低危 · 63 票Path Traversal Vulnerability found on IBM CloudIBM · 2025-05-07 · 高危 · 63 票Path traversal by drive name in Windows environmentNode.js · 2025-01-27 · 低危 · 59 票ActiveStorage Disk Service Path Traversal via Custom Blob Key InjectionRuby on Rails · 2026-05-07 · 低危 · 57 票Path Traversal in dict-fs and no-check Escape Character in oauth2-jwtOpen-Xchange · — · 未评级 · $982 · 57 票Arbitrary File Writearkadiyt-projects · 2025-10-19 · 中危 · 56 票Launchpad file read leaks production keysBasecamp · 2026-10-28 · 高危 · $9,337 · 55 票Path Traversal в iOS приложенииVK.com · 2021-01-08 · 中危 · $700 · 55 票[HIGH] CWE-22 — Path Traversal in FTP Wildcard Download via Unencoded `.` in Escaped Filenamescurl · 2026-09-26 · 中危 · 54 票Path traversal in Tempfile on windows OS due to unsanitized backslashesRuby · 2021-04-07 · 低危 · 54 票Git flag injection leads to arbitrary file writePhabricator · 2021-07-25 · 中危 · 54 票[Android] Directory traversal leading to disclosure of auth tokensSlack · 2022-02-25 · 中危 · $3,500 · 50 票Author → arbitrary file deletion anywhere on disk (site takeover) via `POST /wp/v2/media/<id>/finalize` poisoning `_wp_attachment_metadata`WordPress · 2026-08-28 · 高危 · 48 票Unauthenticated Path Traversal (LFI) via /custom-sounds/ when CustomSounds uses FileSystem storageRocket.Chat · 2026-08-03 · 中危 · 47 票Path traversal through path stored in Uint8Array in Node.js 20Internet Bug Bounty · 2024-01-20 · 中危 · $3,495 · 44 票Path traversal allows tricking the Talk Android app into writing files into it's root directoryNextcloud · 2023-08-14 · 低危 · 43 票GitLab CI runner can read and poison cache of all other projectsGitLab · 2018-04-27 · 高危 · $2,000 · 43 票Permission model improperly protects against path traversal in Node.js 20Internet Bug Bounty · 2023-11-30 · 中危 · $2,330 · 42 票Arbitrary file creation with semi-controlled content (leads to DoS, EoP and others) at Steam Windows ClientValve · 2019-09-26 · 低危 · $1,250 · 41 票Path Traversal issue at https://████/blaze/Sony · 2022-10-06 · 中危 · 40 票Remote code execution via path traversal in Zip extraction in the Extract appNextcloud · 2020-03-07 · 中危 · 40 票[geekbrains.ru] CVE-2019-5418 Ruby on Rails File Content DisclosureMail.ru · — · 未评级 · $750 · 40 票LRF on shared.mail.ru due to "markdown" pluginMail.ru · — · 未评级 · $6,000 · 40 票Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 FixNode.js · 2025-07-28 · 中危 · 39 票CVE-2020-3452 - unauthenticated file read on anyconnect.routematch.comUber · 2021-08-05 · 低危 · 39 票Path traversal via archive.extract - CVE 2021-3281 incomplete patchDjango · 2025-11-21 · 低危 · 38 票Arbitrary write in the application's data folder and arbitrary read of server's replies from 3rd party apps.Basecamp · 2023-06-07 · 中危 · 38 票Path Traversal on Default Installed Rails Application (Asset Pipeline)Ruby on Rails · 2018-07-19 · 低危 · $1,500 · 38 票Path traversal in AcitveStorage, and lead RCERuby on Rails · 2024-10-08 · 中危 · 37 票Unathenticated file read (CVE-2020-3452)U.S. Dept Of Defense · 2023-11-17 · 中危 · 36 票Path traversal by monkey-patching Buffer internalsNode.js · 2024-02-15 · 中危 · 36 票Arbitrary read of all SVG files on a Nextcloud serverNextcloud · 2023-03-26 · 中危 · $1,250 · 36 票Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()Node.js · 2025-07-15 · 中危 · 35 票Delete directory using symlink when decompressing tarRubyGems · 2019-04-11 · 低危 · $500 · 35 票Unpacker improperly validates symlinks, allowing gems writes to arbitrary locationsRubyGems · 2018-12-31 · 低危 · 35 票Non-authenticated path traversal leading to arbitrary file readExpressionEngine · 2024-05-28 · 中危 · 34 票Directory traversal at https://msg.algolia.comAlgolia · 2018-06-09 · 低危 · 34 票Internal machine learning API endpoint for CWE classification is vulnerable to path traversalHackerOne · 2023-07-05 · 低危 · 33 票Path traversal in ZIP extract routine on LINE AndroidLY Corporation · 2020-11-17 · 低危 · $475 · 33 票Arbitrary File Read via file:// Protocol in cURLcurl · 2025-07-09 · 高危 · 31 票Windows only: arbitrary file read vulnerability in openssl s_serverInternet Bug Bounty · 2020-10-10 · 低危 · 31 票Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://██████ (███)U.S. Dept Of Defense · 2024-06-18 · 中危 · 31 票[o2.mail.ru] nginx alias traversalMail.ru · — · 未评级 · $150 · 31 票[dev-nightly.ubnt.com] Local File ReadingUbiquiti Inc. · 2017-09-14 · 中危 · 31 票Active Storage Vips Transformer Missing validate_transformation — CVE-2025-24293 Incomplete FixRuby on Rails · 2026-07-30 · 中危 · 30 票Path Traversal in mbstream ExtractMariaDB · 2026-10-03 · 中危 · 29 票Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (CVE-2021-42013)Internet Bug Bounty · 2021-11-19 · 高危 · $1,000 · 29 票Path Traversal in App ProxyShopify · 2020-08-24 · 低危 · 29 票LFI in pChart php libraryValve · 2018-05-09 · 中危 · 29 票CVE-2020-3187 - unauthenticated arbitrary file deletion in CiscoQIWI · — · 未评级 · 26 票Escaping images directory in S3 bucket when saving new avatar, using Path Traversal in filenameUnikrn · 2017-08-23 · 低危 · 26 票Directory traversal at https://nightly.ubnt.comUbiquiti Inc. · 2017-10-10 · 中危 · 26 票Directory Traversal Vulnerability in cURL via Content-Disposition Header Processingcurl · 2025-11-01 · 低危 · 25 票DNS SRV lookup of file:// sources enables local hijacking of gemsRubyGems · 2018-12-11 · 中危 · $500 · 22 票Ad Builder Display Ads Path TraversalSemrush · 2020-02-28 · 低危 · 22 票Incomplete VCS metadata exclusion: `.svn` / `.bzr` bypass CVE-2026-61792 due to missing `VCS_METADATA_DIRS` entries.Weblate · 2026-10-30 · 低危 · 21 票Path Traversal in writeFile via Unsafe Prefix Containment Check Allows Out-of-Directory Writesarkadiyt-projects · 2026-03-31 · 低危 · 21 票Local File Disclosure /Delete On [us-az-vpn.acronis.com]Acronis · 2021-06-22 · 低危 · 21 票Arbritrary file Upload on AirMaxUbiquiti Inc. · 2016-02-13 · 未评级 · 21 票Multiple permission model bypasses due to improper path traversal sequence sanitizationNode.js · 2024-02-15 · 中危 · 20 票[webvpn.city-srv.ru] Path traversal via CVE-2020-3452Mail.ru · — · 未评级 · 20 票Path traversal on https://███ allows arbitrary file read (CVE-2020-3452)U.S. Dept Of Defense · 2020-08-13 · 中危 · 20 票Path traversal on bank.mail.ru ( CVE-2013-3827 )Mail.ru · — · 未评级 · 20 票[doc.rt.informaticacloud.com] Arbitrary File Reading via Double URL EncodeInformatica · 2022-07-23 · 中危 · 20 票[CVE-2018-0296] Cisco VPN path traversal on the https://███████/ (████.███.mil)U.S. Dept Of Defense · 2024-06-18 · 低危 · 19 票Path Traversal in Nextcloud Talk Android Exposes User Credentials and Private Data via FileProviderNextcloud · 2026-08-24 · 低危 · 18 票Path Traversal in curl file:// Protocol Handler Allows Unauthorized File Accesscurl · 2026-01-04 · 中危 · 18 票Path Traversal Bypass in file:// URLs Due to Incomplete URL-Encoded Path Normalizationcurl · 2025-12-15 · 中危 · 18 票Authenticated path traversal to RCEConcrete CMS · 2021-10-15 · 中危 · 18 票███ is vulnerable to CVE-2020-3452 Read-Only Path Traversal VulnerabilityU.S. Dept Of Defense · 2020-09-03 · 中危 · 18 票22: FTP wildcard matching decodes server-provided filenames, enabling directory traversalcurl · 2026-09-08 · 低危 · 17 票[CVE-2018-0296] Cisco VPN path traversal on the https://███ (████████████████)U.S. Dept Of Defense · 2024-07-19 · 低危 · 17 票Ability to login to the Nexus Repo Manager from https://nexus.imgur.com/Imgur · 2018-12-13 · 低危 · 17 票Arbitrary file deletion in wp-core - guides towards RCE and information disclosureWordPress · 2018-08-29 · 高危 · 17 票libcurl FTP path normalization flaw allows decoded %2e%2e → CWD .. and directory escape (Path Traversal, CWE-22)curl · 2025-11-11 · 中危 · 16 票Arbitrary File Read at ███ via filename parameterU.S. Dept Of Defense · 2022-02-14 · 高危 · 16 票查看全部 243 份报告 →