CWE-29 Path Traversal: '\..\filename'
variantThe product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (123)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-1177US | critical9.8 | Exploit | ||
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
| ||||
| CVE-2024-2083US | critical9.9 | Exploit | ||
A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulatin… | ||||
| CVE-2024-4320US | critical9.8 | Exploit | ||
A remote code execution (RCE) vulnerability exists in the '/install_extension' endpoint of the parisneo/lollms-webui application, specifically within the `@router.post("/install_ex… | ||||
| CVE-2023-6909US | high7.5 | — | ||
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. | ||||
| CVE-1999-0191US | medium6.4 | Exploit | ||
IIS newdsn.exe CGI script allows remote users to overwrite files. | ||||
| CVE-2007-6506US | high9.3 | Exploit | ||
The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwri… | ||||
| CVE-2007-2755US | high10.0 | Exploit | ||
The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname t… | ||||
| CVE-2007-3493US | high7.5 | Exploit | ||
A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers t… | ||||
| CVE-2022-25842US | critical9.8 | Exploit | ||
All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that h… | ||||
| CVE-2012-2627US | high9.4 | Exploit | ||
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFI… | ||||
| CVE-2009-0134US | high9.3 | Exploit | ||
Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitra… | ||||
| CVE-2007-2644US | high9.4 | Exploit | ||
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filenam… | ||||
| CVE-2024-3429US | critical9.8 | — | ||
A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_endpoint` and `sanitize_path` functions in `lollms_core\lollms… | ||||
| CVE-2008-0952US | high9.3 | Exploit | ||
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create fil… | ||||
| CVE-2024-2928US | high7.5 | Exploit | ||
A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the app… | ||||
| CVE-2008-4926US | high9.0 | Exploit | ||
Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files… | ||||
| CVE-2009-4453US | high8.8 | Exploit | ||
Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat me… | ||||
| CVE-2008-1725US | high9.0 | Exploit | ||
The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which… | ||||
| CVE-2024-3848US | high7.5 | — | ||
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the applicat… | ||||
| CVE-2023-1034US | high8.8 | — | ||
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9. | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan