Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 2,053
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,054

Image ID Title
CVE-2026-39387 Vulnerability in BoidCMS (CVE-2026-39387)
CVE-2026-35031 Vulnerability in Jellyfin (CVE-2026-35031)
CVE-2026-34619 Path Traversal in Adobe Coldfusion (CVE-2026-34619)
CVE-2026-27305 Path Traversal in Adobe Coldfusion (CVE-2026-27305)
CVE-2026-39813 Vulnerability in Fortinet FortiSandbox (CVE-2026-39813)
CVE-2025-68649 Path Traversal in Fortinet Fortimanager (CVE-2025-68649)
CVE-2025-61624 KEV [KEV] Path Traversal in Fortinet Fortios (CVE-2025-61624)
CVE-2026-32146 Path Traversal in Lpil (CVE-2026-32146)
CVE-2026-6057 Path Traversal in FalkorDB Browser (CVE-2026-6057)
CVE-2026-39981 Path Traversal in agixt (CVE-2026-39981)
CVE-2026-40027 Path Traversal in ALEAPP (CVE-2026-40027)
CVE-2026-40024 Path Traversal in Sleuth Kit (CVE-2026-40024)
CVE-2026-33466 Path Traversal in Elastic Logstash (CVE-2026-33466)
CVE-2026-39408 Path Traversal in Hono (CVE-2026-39408)
CVE-2026-39847 Path Traversal in emmett (CVE-2026-39847)
CVE-2025-24819 Vulnerability in Nokia MantaRay NM (CVE-2025-24819)
CVE-2026-35454 Path Traversal in github.com/coder/code-marketplace (CVE-2026-35454)
CVE-2026-35471 Path Traversal in github.com/patrickhener/goshs (CVE-2026-35471)
CVE-2026-35177 Path Traversal in Vim (CVE-2026-35177)
CVE-2026-35174 Path Traversal in Chyrp Lite (CVE-2026-35174)
CVE-2026-5597 Path Traversal in griptape-ai griptape (CVE-2026-5597)
CVE-2026-5595 Path Traversal in griptape-ai griptape (CVE-2026-5595)
CVE-2026-5535 Path Traversal in FedML-AI FedML (CVE-2026-5535)
CVE-2026-3666 Path Traversal in wpForo Forum (WordPress plugin) (CVE-2026-3666)
CVE-2026-34607 Path Traversal in Emlog (CVE-2026-34607)
CVE-2026-34978 Path Traversal in OpenPrinting CUPS (CVE-2026-34978)
CVE-2026-26058 Path Traversal in Zulip (CVE-2026-26058)
CVE-2026-22661 Path Traversal in Fka (CVE-2026-22661)
CVE-2026-28373 Path Traversal in Apple macOS (CVE-2026-28373)
CVE-2026-35214 Path Traversal in Budibase (CVE-2026-35214)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details