Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 14
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Remote Code Execution19 Server-Side Request Forgery17 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 1,343

ID Title
CVE-2018-20250 KEV [KEV] Vulnerability in Rarlab winrar (CVE-2018-20250)
CVE-2021-45418 Path Traversal in path-traversal (CVE-2021-45418)
CVE-2021-41449 Path Traversal in path-traversal (CVE-2021-41449)
CVE-2020-3452 KEV [KEV] Vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2020-3452)
CVE-2018-0296 KEV [KEV] Vulnerability in Cisco adaptive-security-appliance-asa (CVE-2018-0296)
CVE-2019-19781 KEV [KEV] Path Traversal in Citrix application-delivery-controller-adc (CVE-2019-19781)
CVE-2021-34762 Path Traversal in path-traversal (CVE-2021-34762)
CVE-2021-1256 Vulnerability in path-traversal (CVE-2021-1256)
CVE-2021-29425 Vulnerability in apache (CVE-2021-29425)
CVE-2017-15684 Path Traversal in path-traversal (CVE-2017-15684)
CVE-2017-15681 Path Traversal in path-traversal (CVE-2017-15681)
CVE-2020-3550 Path Traversal in path-traversal (CVE-2020-3550)
CVE-2020-3187 Path Traversal in c (CVE-2020-3187)
CVE-2018-1002206 Path Traversal in path-traversal (CVE-2018-1002206)
CVE-2017-17992 Path Traversal in path-traversal (CVE-2017-17992)
CVE-2015-7669 Path Traversal in wordpress (CVE-2015-7669)
CVE-2017-15309 Path Traversal in path-traversal (CVE-2017-15309)
CVE-2017-10907 Path Traversal in path-traversal (CVE-2017-10907)
CVE-2017-5261 Vulnerability in path-traversal (CVE-2017-5261)
CVE-2017-15532 Path Traversal in path-traversal (CVE-2017-15532)
CVE-2017-17739 Path Traversal in path-traversal (CVE-2017-17739)
CVE-2017-17715 Path Traversal in path-traversal (CVE-2017-17715)
CVE-2017-16788 Path Traversal in path-traversal (CVE-2017-16788)
CVE-2017-17671 Path Traversal in apache (CVE-2017-17671)
CVE-2017-15893 Path Traversal in path-traversal (CVE-2017-15893)
CVE-2017-15894 Path Traversal in path-traversal (CVE-2017-15894)
CVE-2017-15895 Path Traversal in path-traversal (CVE-2017-15895)
CVE-2017-16929 Path Traversal in path-traversal (CVE-2017-16929)
CVE-2017-10861 Path Traversal in path-traversal (CVE-2017-10861)
CVE-2017-15607 Path Traversal in path-traversal (CVE-2017-15607)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →