Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,054

Image ID Title
CVE-2026-73765 Path Traversal in Hpe (CVE-2026-73765)
CVE-2026-73760 Path Traversal in AOS-CX (CVE-2026-73760)
CVE-2026-78592 Path Traversal in Elastic Kibana (CVE-2026-78592)
CVE-2026-73737 Path Traversal in HPE Networking Fabric Composer (CVE-2026-73737)
CVE-2026-67395 Path Traversal in Sage Employee Self Service's custom logo functionality (CVE-2026-67395)
CVE-2026-82954 Path Traversal in Dokploy (CVE-2026-82954)
CVE-2026-82393 Path Traversal in pnpm (CVE-2026-82393)
CVE-2026-79407 Path Traversal in MetaGPT (CVE-2026-79407)
CVE-2026-79743 Path Traversal in MCPHub (CVE-2026-79743)
CVE-2026-82665 Path Traversal in yaojingang GEOFlow (CVE-2026-82665)
CVE-2026-82673 Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin…
CVE-2026-82603 Path Traversal in SeaCMS (CVE-2026-82603)
CVE-2026-82599 Path Traversal in SeaCMS (CVE-2026-82599)
CVE-2026-56718 Path Traversal in AJCloud AJY IPC firmware (CVE-2026-56718)
CVE-2026-82656 Path Traversal in Admidio (CVE-2026-82656)
CVE-2026-82650 Vulnerability in SiYuan (CVE-2026-82650)
CVE-2026-82635 Path Traversal in Pake (CVE-2026-82635)
CVE-2026-82460 Path Traversal in Cloud Commander (CVE-2026-82460)
CVE-2026-82481 The cohttp package before 6.3.0 for OCaml allows directory traversal.
CVE-2026-18899 Path Traversal in Langflow (CVE-2026-18899)
CVE-2026-82275 Path Traversal in Qwen-Agent (CVE-2026-82275)
CVE-2026-82264 Path Traversal in Duplicacy (CVE-2026-82264)
CVE-2026-82112 Path Traversal in houtini-ai houtini-lm (CVE-2026-82112)
CVE-2026-38093 file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to...
CVE-2026-82251 Path Traversal in gitoxide (CVE-2026-82251)
CVE-2026-82253 gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal...
CVE-2026-82111 Path Traversal in iswalle getnote-mcp (CVE-2026-82111)
CVE-2026-82233 Path Traversal in SiYuan (CVE-2026-82233)
CVE-2026-81847 Path Traversal in MAA-AI MaaMCP (CVE-2026-81847)
CVE-2026-75418 Path Traversal in Lektor (CVE-2026-75418)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details