Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,054

Image ID Title
CVE-2025-68705 Path Traversal in RustFS (CVE-2025-68705)
CVE-2025-67366 Vulnerability in @sylphxltd/filesystem-mcp (CVE-2025-67366)
CVE-2025-46256 Vulnerability in Advanced Database Cleaner PRO (CVE-2025-46256)
CVE-2025-14867 Path Traversal in Flashcard (WordPress plugin) (CVE-2025-14867)
CVE-2025-68953 Path Traversal in Frappe (CVE-2025-68953)
CVE-2025-68428 Vulnerability in jsPDF (CVE-2025-68428)
CVE-2025-15236 Vulnerability in Quantatw (CVE-2025-15236)
CVE-2025-15237 Vulnerability in Quantatw (CVE-2025-15237)
CVE-2025-15449 Path Traversal in cld378632668 JavaMall (CVE-2025-15449)
CVE-2025-67160 Path Traversal in Vatilon (CVE-2025-67160)
CVE-2025-59381 Path Traversal in Qnap Qts (CVE-2025-59381)
CVE-2025-59384 Path Traversal in Qfiling (CVE-2025-59384)
CVE-2025-53594 A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user…
CVE-2025-59380 Path Traversal in Qnap Qts (CVE-2025-59380)
CVE-2025-15432 Path Traversal in yeqifu carRental (CVE-2025-15432)
CVE-2025-28973 Vulnerability in Pro Bulk Watermark Plugin for WordPress (CVE-2025-28973)
CVE-2022-50796 Path Traversal in Sound4 (CVE-2022-50796)
CVE-2025-15245 Path Traversal in D-Link DCS-850L (CVE-2025-15245)
CVE-2025-67254 Path Traversal in Nagios Xi (CVE-2025-67254)
CVE-2025-14728 Path Traversal in Linux Rapid7 Velociraptor (CVE-2025-14728)
CVE-2025-15187 Path Traversal in GreenCMS (CVE-2025-15187)
CVE-2025-15227 Vulnerability in Welltend (CVE-2025-15227)
CVE-2025-15225 Vulnerability in Sunnet (CVE-2025-15225)
CVE-2025-15066 Path Traversal in Innorix WP (CVE-2025-15066)
CVE-2025-15138 Path Traversal in prasathmani TinyFileManager (CVE-2025-15138)
CVE-2025-66737 Vulnerability in Yealink T21P_E2 Phone (CVE-2025-66737)
CVE-2025-57403 Vulnerability in Cola Dnslog (CVE-2025-57403)
CVE-2025-15076 Path Traversal in Tenda CH22 (CVE-2025-15076)
CVE-2025-68916 Vulnerability in Riello UPS NetMan 208 Application (CVE-2025-68916)
CVE-2025-67442 Path Traversal in EVE-NG (CVE-2025-67442)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details