Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,054

Image ID Title
CVE-2026-96454 Pake turns a website into a desktop application built on Tauri. Every application it generates...
CVE-2026-91801 Path Traversal in Microsoft Windows (CVE-2026-91801)
CVE-2026-91797 Vulnerability in Microsoft Windows (CVE-2026-91797)
CVE-2026-19438 Path Traversal in Mint Workbench I (CVE-2026-19438)
CVE-2026-18133 Path Traversal in Ibm Financial Transaction Manager (CVE-2026-18133)
CVE-2026-77266 Path Traversal in mcp-atlassian (CVE-2026-77266)
CVE-2026-34689 Path Traversal in Adobe macOS (CVE-2026-34689)
CVE-2026-57149 Vulnerability in plone.app.portlets (CVE-2026-57149)
CVE-2026-80156 Path Traversal in Lantronix SLC8000 before firmware (CVE-2026-80156)
CVE-2026-80155 Path Traversal in Lantronix SLC8000 before firmware (CVE-2026-80155)
CVE-2026-77621 Path Traversal in Vector (CVE-2026-77621)
CVE-2026-95701 In MISP, the __statisticsOrgs method in UsersController.php used the organization name directly...
CVE-2026-95698 The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a...
CVE-2026-95273 Path Traversal in dgtlmoon changedetection.io (CVE-2026-95273)
CVE-2026-95272 Path Traversal in dgtlmoon changedetection.io (CVE-2026-95272)
CVE-2026-15095 Path Traversal in WordPress (CVE-2026-15095)
CVE-2025-1280 Path Traversal in BM Content Builder (WordPress plugin) (CVE-2025-1280)
CVE-2026-94489 Path Traversal in OctoPrint (CVE-2026-94489)
CVE-2026-93616 KEV [KEV] Path Traversal in Check point Checkpoint (CVE-2026-93616)
CVE-2026-61647 Path Traversal in @roomi-fields/notebooklm-mcp (CVE-2026-61647)
CVE-2026-79318 Path Traversal in web2py (CVE-2026-79318)
CVE-2026-94049 Path Traversal in 06ketan slideshot (CVE-2026-94049)
CVE-2026-94046 Path Traversal in 0215AndrewFeng ACE-MCP (CVE-2026-94046)
CVE-2026-94044 Path Traversal in 03-lovepreetSingh MCP (CVE-2026-94044)
CVE-2026-94037 Path Traversal in 00Kisumi00 mcp-file-analyzer (CVE-2026-94037)
CVE-2026-93992 Path Traversal in Gopeed (CVE-2026-93992)
CVE-2026-93988 Path Traversal in QloApps (CVE-2026-93988)
CVE-2026-93986 Path Traversal in rclone (CVE-2026-93986)
CVE-2026-93987 Vulnerability in rclone (CVE-2026-93987)
CVE-2026-82896 Path Traversal in IBM Guardium Data Protection (CVE-2026-82896)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details