Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,058

Image ID Title
CVE-2026-14903 Path Traversal in Ivanti Xtraction (CVE-2026-14903)
CVE-2026-15265 Path Traversal in Tenable Agent (CVE-2026-15265)
CVE-2026-49488 Path Traversal in Apache (CVE-2026-49488)
CVE-2026-12482 Path Traversal in keras (CVE-2026-12482)
CVE-2026-12511 Vulnerability in AI Engine (WordPress plugin) (CVE-2026-12511)
CVE-2026-15626 Path Traversal in nextlevelbuilder GoClaw (CVE-2026-15626)
CVE-2026-57856 Path Traversal in Cockpit CMS (CVE-2026-57856)
CVE-2026-49970 Path Traversal in plank/laravel-mediable (CVE-2026-49970)
CVE-2026-26396 Path Traversal in OpenBMB XAgent (CVE-2026-26396)
CVE-2026-61505 Path Traversal in Rejetto HFS (CVE-2026-61505)
CVE-2026-61462 mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that...
CVE-2026-57815 Path Traversal in WordPress Forminator (CVE-2026-57815)
CVE-2026-57709 Path Traversal in Membership For WooCommerce (CVE-2026-57709)
CVE-2026-57401 Path Traversal in SureDash (CVE-2026-57401)
CVE-2026-57389 Path Traversal in Groundhogg (CVE-2026-57389)
CVE-2026-15527 Path Traversal in better-auth better-icons (CVE-2026-15527)
CVE-2026-15526 Path Traversal in augmnt augments-mcp-server (CVE-2026-15526)
CVE-2026-15522 Path Traversal in tugcantopaloglu godot-mcp (CVE-2026-15522)
CVE-2026-15524 Path Traversal in alioshr memory-bank-mcp (CVE-2026-15524)
CVE-2026-15521 Path Traversal in makafeli n8n-workflow-builder (CVE-2026-15521)
CVE-2026-60088 Path Traversal in praisonai (CVE-2026-60088)
CVE-2026-9282 Path Traversal in W3 Total Cache (WordPress plugin) (CVE-2026-9282)
CVE-2026-15338 Vulnerability in LA-Studio Element Kit for Elementor (WordPress plugin) (CVE-2026-15338)
CVE-2026-41482 Path Traversal in Frappe (CVE-2026-41482)
CVE-2026-42219 Path Traversal in Frappe (CVE-2026-42219)
CVE-2026-58499 Path Traversal in everos (CVE-2026-58499)
CVE-2026-55469 Path Traversal in snipe/snipe-it (CVE-2026-55469)
CVE-2025-70796 Path Traversal in WTI (CVE-2025-70796)
CVE-2026-58493 Vulnerability in grav-plugin-database (CVE-2026-58493)
CVE-2026-61431 Path Traversal in praisonai (CVE-2026-61431)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details