Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,054

Image ID Title
CVE-2026-19299 Path Traversal in Langflow macOS (CVE-2026-19299)
CVE-2026-9138 Path Traversal in Langflow macOS (CVE-2026-9138)
CVE-2026-85684 Vulnerability in marker (CVE-2026-85684)
CVE-2026-85685 Path Traversal in AgentScope (CVE-2026-85685)
CVE-2026-85690 Path Traversal in Plandex (CVE-2026-85690)
CVE-2026-85665 Path Traversal in Bruno (CVE-2026-85665)
CVE-2026-85606 Path Traversal in firecrawl-mcp-server (CVE-2026-85606)
CVE-2026-74235 Path Traversal in GFI Exinda AI (CVE-2026-74235)
CVE-2026-74236 Path Traversal in GFI Exinda AI (CVE-2026-74236)
CVE-2026-85603 Vulnerability in Grav (CVE-2026-85603)
CVE-2026-85583 Vulnerability in SiYuan (CVE-2026-85583)
CVE-2026-79707 Path Traversal in Google Cloud Agent Development Kit (CVE-2026-79707)
CVE-2026-85409 Path Traversal in Eleveo Quality Management (CVE-2026-85409)
CVE-2026-67397 Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to...
CVE-2026-82521 Path Traversal in parsedmarc (CVE-2026-82521)
CVE-2026-85396 Path Traversal in rubyzip (CVE-2026-85396)
CVE-2026-85199 Path Traversal in Eclipse aeriOS Self-orchestrator (CVE-2026-85199)
CVE-2026-85160 AVideo through commit c91b5975d contains a cross-site request forgery and path traversal...
CVE-2026-85124 Path Traversal in @fastify/http-proxy (CVE-2026-85124)
CVE-2026-84852 Path Traversal in Reader Tools PDF Reader App (CVE-2026-84852)
CVE-2026-84669 Path Traversal in Jenkins Allure Plugin (CVE-2026-84669)
CVE-2026-78602 Path Traversal in Elastic Maps Server (CVE-2026-78602)
CVE-2026-78599 Path Traversal in Elastic Kibana (CVE-2026-78599)
CVE-2026-78591 Path Traversal in Elastic Kibana (CVE-2026-78591)
CVE-2026-78590 Path Traversal in Elastic Kibana (CVE-2026-78590)
CVE-2026-78657 Path Traversal in SigmaForms Pro – AI Generated Forms (WordPress plugin) (CVE-2026-78657)
CVE-2026-84442 Path Traversal in MapQuest Get Directions App (CVE-2026-84442)
CVE-2026-84441 Path Traversal in Piwigo (CVE-2026-84441)
CVE-2026-84431 Path Traversal in AirAsia MOVE App (CVE-2026-84431)
CVE-2026-84478 Vulnerability in WWBN AVideo (CVE-2026-84478)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details