43
Reference Description
https://www.cve.org/CVERecord?id=CVE-2022-24877
CVE-2021-21972 Chain: Cloud computing virtualization platform does not require authentication
for upload of a tar format file (CWE-306), then uses .. path traversal sequences
(CWE-23) in the file to access unexpected files, as exploited in the wild per
CISA KEV.
https://www.cve.org/CVERecord?id=CVE-2021-21972
CVE-2020-4053 a Kubernetes package manager written in Go allows malicious plugins to inject
path traversal sequences into a plugin archive ("Zip slip") to copy a file outside
the intended directory
https://www.cve.org/CVERecord?id=CVE-2020-4053
CVE-2020-3452 Chain: security product has improper input validation (CWE-20) leading to
directory traversal (CWE-22), as exploited in the wild per CISA KEV.
https://www.cve.org/CVERecord?id=CVE-2020-3452
CVE-2019-10743 Go-based archive library allows extraction of files to locations outside of the
target folder with "../" path traversal sequences in filenames in a zip file, aka
"Zip Slip"
https://www.cve.org/CVERecord?id=CVE-2019-10743
CVE-2010-0467 Newsletter module allows reading arbitrary files using "../" sequences.
https://www.cve.org/CVERecord?id=CVE-2010-0467
CVE-2006-7079 Chain: PHP app uses extract for register_globals compatibility layer
(CWE-621), enabling path traversal (CWE-22)
https://www.cve.org/CVERecord?id=CVE-2006-7079
CVE-2009-4194 FTP server allows deletion of arbitrary files using ".." in the DELE command.
https://www.cve.org/CVERecord?id=CVE-2009-4194
CVE-2009-4053 FTP server allows creation of arbitrary directories using ".." in the MKD
command.
https://www.cve.org/CVERecord?id=CVE-2009-4053
CVE-2009-0244 FTP service for a Bluetooth device allows listing of directories, and creation or
reading of files using ".." sequences.
https://www.cve.org/CVERecord?id=CVE-2009-0244
CVE-2009-4013 Software package maintenance program allows overwriting arbitrary files using
"../" sequences.
https://www.cve.org/CVERecord?id=CVE-2009-4013
CVE-2009-4449 Bulletin board allows attackers to determine the existence of files using the
avatar.
https://www.cve.org/CVERecord?id=CVE-2009-4449
CVE-2009-4581 PHP program allows arbitrary code execution using ".." in filenames that are
fed to the include() function.
https://www.cve.org/CVERecord?id=CVE-2009-4581
CVE-2010-0012 Overwrite of files using a .. in a Torrent file.
https://www.cve.org/CVERecord?id=CVE-2010-0012
CVE-2010-0013 Chat program allows overwriting files using a custom smiley request.
https://www.cve.org/CVERecord?id=CVE-2010-0013
CVE-2008-5748 Chain: external control of values for user's desired language and theme
enables path traversal.
https://www.cve.org/CVERecord?id=CVE-2008-5748
CVE-2009-1936 Chain: library file sends a redirect if it is directly requested but continues to
execute, allowing remote file inclusion and path traversal.
https://www.cve.org/CVERecord?id=CVE-2009-1936
Functional Areas
• File Processing
Affected Resources
CWE Version 4.14
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22: Improper Limitation of a Pathname
to a Restricted Directory ('Path Traversal') 44
• File or Directory
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 635 Weaknesses Originally Used by NVD from 2008 to 2016 635 2552
MemberOf 715 OWASP Top Ten 2007 Category A4 - Insecure Direct
Object Reference
629 2331
MemberOf 723 OWASP Top Ten 2004 Category A2 - Broken Access
Control
711 2335
MemberOf 743 CERT C Secure Coding Standard (2008) Chapter 10 -
Input Output (FIO)
734 2347
MemberOf 802 2010 Top 25 - Risky Resource Management 800 2354
MemberOf 813 OWASP Top Ten 2010 Category A4 - Insecure Direct
Object References
809 2357
MemberOf 865 2011 Top 25 - Risky Resource Management 900 2371
MemberOf 877 CERT C++ Secure Coding Section 09 - Input Output
(FIO)
868 2377
MemberOf 884 CWE Cross-section 884 2567
MemberOf 932 OWASP Top Ten 2013 Category A4 - Insecure Direct
Object References
928 2390
MemberOf 981 SFP Secondary Cluster: Path Traversal 888 2409
MemberOf 1031 OWASP Top Ten 2017 Category A5 - Broken Access
Control
1026 2437
MemberOf 1131 CISQ Quality Measures (2016) - Security 1128 2442
MemberOf 1179 SEI CERT Perl Coding Standard - Guidelines 01. Input
Validation and Data Sanitization (IDS)
1178 2465
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
MemberOf 1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous
Software Weaknesses
1337 2589
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1345 OWASP Top Ten 2021 Category A01:2021 - Broken
Access Control
1344 2487
MemberOf 1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous
Software Weaknesses
1350 2594
MemberOf 1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous
Software Weaknesses
1387 2597
MemberOf 1404 Comprehensive Categorization: File Handling 1400 2529
MemberOf 1425 Weaknesses in the 2023 CWE Top 25 Most Dangerous
Software Weaknesses
1425 2600
Notes
Relationship
Pathname equivalence can be regarded as a type of canonicalization error.
Relationship
Some pathname equivalence issues are not directly related to directory traversal, rather are used
to bypass security-relevant checks for whether a file/directory can be accessed by the attacker
CWE Version 4.14
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22: Improper Limitation of a Pathname
to a Restricted Directory ('Path Traversal')