Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,054

Image ID Title
CVE-2026-51134 The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal...
CVE-2026-69201 Path Traversal in org.http4s:http4s-server_2.12 (CVE-2026-69201)
CVE-2026-91989 Path Traversal in atomic-agents-stack (CVE-2026-91989)
CVE-2026-87791 Path Traversal in WordPress Design Scuole Italia theme (CVE-2026-87791)
CVE-2026-91771 Path Traversal in Weights & Biases wandb (CVE-2026-91771)
CVE-2026-86886 Path Traversal in Apple Ipados (CVE-2026-86886)
CVE-2026-84598 Path Traversal in Apple Ipados (CVE-2026-84598)
CVE-2026-84568 Path Traversal in Apple macOS (CVE-2026-84568)
CVE-2026-16335 Path Traversal in IBM DataStage on Cloud Pak for Data (CVE-2026-16335)
CVE-2026-89021 Path Traversal in MikroTik RouterOS (CVE-2026-89021)
CVE-2026-82035 Path Traversal in PyMuPDF (CVE-2026-82035)
CVE-2026-76440 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure...
CVE-2026-90932 Vulnerability in LaraDashboard (CVE-2026-90932)
CVE-2026-90691 Path Traversal in 0x4m4 HexStrike AI (CVE-2026-90691)
CVE-2026-82768 Vulnerability in SGA1000 (CVE-2026-82768)
CVE-2026-82765 Vulnerability in Contec FX5000 series (CVE-2026-82765)
CVE-2023-40772 Vulnerability in DataEase (CVE-2023-40772)
CVE-2023-45858 Vulnerability in Paessler PRTG (CVE-2023-45858)
CVE-2025-70820 Vulnerability in Zettlab D6 Ultra (CVE-2025-70820)
CVE-2026-90774 Path Traversal in rustypaste (CVE-2026-90774)
CVE-2026-90494 Path Traversal in restify node-restify (CVE-2026-90494)
CVE-2026-49846 libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP…
CVE-2025-69904 Path Traversal in Linkstack (CVE-2025-69904)
CVE-2026-87727 a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an...
CVE-2026-77807 Path Traversal in WordPress (CVE-2026-77807)
CVE-2026-82100 Path Traversal in IBM DataStage on Cloud Pak for Data (CVE-2026-82100)
CVE-2026-82092 Vulnerability in IBM DataStage on Cloud Pak for Data (CVE-2026-82092)
CVE-2026-81540 Path Traversal in IBM DataStage on Cloud Pak for Data (CVE-2026-81540)
CVE-2026-81551 Path Traversal in IBM DataStage on Cloud Pak for Data (CVE-2026-81551)
CVE-2026-81554 Path Traversal in IBM DataStage on Cloud Pak for Data (CVE-2026-81554)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details