Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,054

Image ID Title
CVE-2022-23347 Path Traversal in BigAnt Software BigAnt Server (CVE-2022-23347)
CVE-2022-22914 Path Traversal in Ovidentia CMS (CVE-2022-22914)
CVE-2018-20250 KEV [KEV] Vulnerability in RARLAB WinRAR (CVE-2018-20250)
CVE-2021-45418 Path Traversal in Starcharge (CVE-2021-45418)
CVE-2021-41449 Path Traversal in Netgear Rax35 Firmware (CVE-2021-41449)
CVE-2020-3452 KEV [KEV] Vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) (CVE-2020-3452)
CVE-2018-0296 KEV [KEV] Vulnerability in Cisco Adaptive Security Appliance (ASA) (CVE-2018-0296)
CVE-2019-19781 KEV [KEV] Path Traversal in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance (CVE-2019-19781)
CVE-2021-34762 Path Traversal in Cisco Firepower Management Center (FMC) Software (CVE-2021-34762)
CVE-2021-1256 Vulnerability in Cisco Firepower Threat Defense (FTD) Software (CVE-2021-1256)
CVE-2021-29425 Vulnerability in Apache Weblogic Server (CVE-2021-29425)
CVE-2021-3199 KEV [KEV] Path Traversal in ONLYOFFICE Document Server (CVE-2021-3199)
CVE-2017-15684 Path Traversal in Crafter CMS Crafter Studio (CVE-2017-15684)
CVE-2017-15681 Path Traversal in Crafter CMS Crafter Studio (CVE-2017-15681)
CVE-2020-3550 Path Traversal in Cisco Firepower Management Center (FMC) Software (CVE-2020-3550)
CVE-2020-3187 Path Traversal in Cisco Adaptive Security Appliance (ASA) Software (CVE-2020-3187)
CVE-2019-7105 Path Traversal in Adobe macOS (CVE-2019-7105)
CVE-2019-7106 Path Traversal in Adobe macOS (CVE-2019-7106)
CVE-2019-6111 Path Traversal in OpenBSD Apache (CVE-2019-6111)
CVE-2018-17828 Path Traversal in ZZIPlib (CVE-2018-17828)
CVE-2018-1002206 Path Traversal in sharpcompress (CVE-2018-1002206)
CVE-2017-17992 Path Traversal in Iwcnetwork (CVE-2017-17992)
CVE-2015-7669 Path Traversal in WordPress Easy2Map plugin (CVE-2015-7669)
CVE-2017-15309 Path Traversal in Huawei iReader app (CVE-2017-15309)
CVE-2017-10907 Path Traversal in OneThird CMS Show Off (CVE-2017-10907)
CVE-2017-5261 Vulnerability in Cambiumnetworks (CVE-2017-5261)
CVE-2017-15532 Path Traversal in Symantec Messaging Gateway (CVE-2017-15532)
CVE-2017-17739 Path Traversal in Brightsign (CVE-2017-17739)
CVE-2017-17715 Path Traversal in Telegram (CVE-2017-17715)
CVE-2017-16788 Path Traversal in Meinbergglobal (CVE-2017-16788)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details