Draft in the CWE catalog · 2 CVEs mapped
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\dir\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.
⚡ A sneaky path traversal vulnerability in Traefik could let an attacker overwrite any file they choose! 🛠️ Think of it like a delivery driver who misreads an address and ends up dropping packages in the wrong location—this exploit allows a malicious actor to manipulate file paths and deliver their own dangerous files straight to your system. An attacker could potentially gain full remote code execution, escalate privileges, or even cause denial of service, making this a high-stakes game! They could overwrite critical files, leading to chaos on your server. Imagine the disruption if your website goes down or worse!