Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,059

Image ID Title
CVE-2026-54066 Vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-54066)
CVE-2026-57296 Path Traversal in org.jenkins-ci.plugins:external-workspace-manager (CVE-2026-57296)
CVE-2026-55488 Path Traversal in motioneye (CVE-2026-55488)
CVE-2026-52813 Vulnerability in gogs.io/gogs (CVE-2026-52813)
CVE-2026-52802 Open Redirect in gogs.io/gogs (CVE-2026-52802)
CVE-2026-10645 Out-of-Bounds Read in Zephyr (CVE-2026-10645)
CVE-2026-53779 Path Traversal in WebP Server Go (CVE-2026-53779)
CVE-2026-31978 Path Traversal in motioneye (CVE-2026-31978)
CVE-2026-41046 Vulnerability in Presire (CVE-2026-41046)
CVE-2026-12479 Path Traversal in keras (CVE-2026-12479)
CVE-2026-56448 Path Traversal in AIL Framework (CVE-2026-56448)
CVE-2026-42129 Path Traversal in github.com/grafana/grafana (CVE-2026-42129)
CVE-2026-10601 Path Traversal in github.com/grafana/grafana (CVE-2026-10601)
CVE-2026-12821 Path Traversal in FlowiseAI Flowise (CVE-2026-12821)
CVE-2026-56394 Path Traversal in craftcms/cms (CVE-2026-56394)
CVE-2026-49339 Path Traversal in go.senan.xyz/gonic (CVE-2026-49339)
CVE-2026-55374 Vulnerability in jleehr/canto-saas-api (CVE-2026-55374)
CVE-2026-56138 AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The...
CVE-2026-54414 Path Traversal in FileRise (CVE-2026-54414)
CVE-2026-7547 Path Traversal in Woosa – Marktplaats for WooCommerce (WordPress plugin) (CVE-2026-7547)
CVE-2026-10720 Vulnerability in github.com/canonical/microceph/microceph (CVE-2026-10720)
CVE-2026-56078 Path Traversal in praisonai (CVE-2026-56078)
CVE-2026-44942 A path traversal in handling the "path" component of .repo files processed by libzypp before 17...
CVE-2026-54223 Path Traversal in UBB.threads (CVE-2026-54223)
CVE-2026-12568 Out-of-Bounds Read in bbot (CVE-2026-12568)
CVE-2026-12565 Path Traversal in bbot (CVE-2026-12565)
CVE-2026-55201 Path Traversal in Evil-WinRM (CVE-2026-55201)
CVE-2026-49133 Path Traversal in Typemill (CVE-2026-49133)
CVE-2026-55760 Path Traversal in com.github.jknack:handlebars (CVE-2026-55760)
CVE-2025-69128 Path Traversal in JobCareer (CVE-2025-69128)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details