CWE-28Variant

Path Traversal: '..\filedir'

Incomplete in the CWE catalog · 1 CVE mapped

1
CVEs mapped
4.3
Median CVSS
What it is

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "..\" sequences that can resolve to a location that is outside of that directory.

Recent examples
4.3cvss
CVE-2023-2059

DedeCMS select_templets.php path traversal

A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/select_templets.php. The manipulation leads to path traversal: '..\filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225944.

MEDIUMno explanation yet
2%
epss
The record
Technical detail
CWE ID
CWE-28
Abstraction
Variant
Structure
Simple
Status
Incomplete