51
Reference Description
CVE-2022-24877 directory traversal in Go-based Kubernetes operator app allows accessing
data from the controller's pod file system via ../ sequences in a yaml file
https://www.cve.org/CVERecord?id=CVE-2022-24877
CVE-2020-4053 a Kubernetes package manager written in Go allows malicious plugins to inject
path traversal sequences into a plugin archive ("Zip slip") to copy a file outside
the intended directory
https://www.cve.org/CVERecord?id=CVE-2020-4053
CVE-2021-21972 Chain: Cloud computing virtualization platform does not require authentication
for upload of a tar format file (CWE-306), then uses .. path traversal sequences
(CWE-23) in the file to access unexpected files, as exploited in the wild per
CISA KEV.
https://www.cve.org/CVERecord?id=CVE-2021-21972
CVE-2019-10743 Go-based archive library allows extraction of files to locations outside of the
target folder with "../" path traversal sequences in filenames in a zip file, aka
"Zip Slip"
https://www.cve.org/CVERecord?id=CVE-2019-10743
CVE-2002-0298 Server allows remote attackers to cause a denial of service via certain
HTTP GET requests containing a %2e%2e (encoded dot-dot), several "/../"
sequences, or several "../" in a URI.
https://www.cve.org/CVERecord?id=CVE-2002-0298
CVE-2002-0661 "\" not in denylist for web server, allowing path traversal attacks when the
server is run in Windows and other OSes.
https://www.cve.org/CVERecord?id=CVE-2002-0661
CVE-2002-0946 Arbitrary files may be read files via ..\ (dot dot) sequences in an HTTP request.
https://www.cve.org/CVERecord?id=CVE-2002-0946
CVE-2002-1042 Directory traversal vulnerability in search engine for web server allows remote
attackers to read arbitrary files via "..\" sequences in queries.
https://www.cve.org/CVERecord?id=CVE-2002-1042
CVE-2002-1209 Directory traversal vulnerability in FTP server allows remote attackers to read
arbitrary files via "..\" sequences in a GET request.
https://www.cve.org/CVERecord?id=CVE-2002-1209
CVE-2002-1178 Directory traversal vulnerability in servlet allows remote attackers to execute
arbitrary commands via "..\" sequences in an HTTP request.
https://www.cve.org/CVERecord?id=CVE-2002-1178
CVE-2002-1987 Protection mechanism checks for "/.." but doesn't account for Windows-specific
"\.." allowing read of arbitrary files.
https://www.cve.org/CVERecord?id=CVE-2002-1987
CVE-2005-2142 Directory traversal vulnerability in FTP server allows remote authenticated
attackers to list arbitrary directories via a "\.." sequence in an LS command.
https://www.cve.org/CVERecord?id=CVE-2005-2142
CVE-2002-0160 The administration function in Access Control Server allows remote attackers
to read HTML, Java class, and image files outside the web root via a "..\.."
sequence in the URL to port 2002.
https://www.cve.org/CVERecord?id=CVE-2002-0160
CVE-2001-0467 "\..." in web server
https://www.cve.org/CVERecord?id=CVE-2001-0467
CVE-2001-0963 "..." in cd command in FTP server
https://www.cve.org/CVERecord?id=CVE-2001-0963
CVE-2001-1193 "..." in cd command in FTP server
https://www.cve.org/CVERecord?id=CVE-2001-1193
CVE-2001-1131 "..." in cd command in FTP server
https://www.cve.org/CVERecord?id=CVE-2001-1131
CWE Version 4.14
CWE-23: Relative Path Traversal
CWE-23: Relative Path Traversal