Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 14
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Remote Code Execution19 Server-Side Request Forgery17 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 1,343

ID Title
CVE-2026-76358 Path Traversal in path-traversal (CVE-2026-76358)
CVE-2026-16888 Path Traversal in path-traversal (CVE-2026-16888)
CVE-2026-76576 Path Traversal in vue (CVE-2026-76576)
CVE-2026-76614 Path Traversal in path-traversal (CVE-2026-76614)
CVE-2026-75949 Unrestricted File Upload in csrf (CVE-2026-75949)
CVE-2026-53451 Path Traversal in path-traversal (CVE-2026-53451)
CVE-2026-15061 Path Traversal in path-traversal (CVE-2026-15061)
CVE-2026-70424 Path Traversal in path-traversal (CVE-2026-70424)
CVE-2026-73973 Path Traversal in path-traversal (CVE-2026-73973)
CVE-2026-47630 Vulnerability in path-traversal (CVE-2026-47630)
CVE-2026-47627 Path Traversal in path-traversal (CVE-2026-47627)
CVE-2026-47606 Vulnerability in path-traversal (CVE-2026-47606)
CVE-2026-52607 Path Traversal in path-traversal (CVE-2026-52607)
CVE-2026-52610 Path Traversal in path-traversal (CVE-2026-52610)
CVE-2026-74038 Path Traversal in path-traversal (CVE-2026-74038)
CVE-2026-74044 Path Traversal in path-traversal (CVE-2026-74044)
CVE-2026-75914 Path Traversal in path-traversal (CVE-2026-75914)
CVE-2026-45532 Path Traversal in path-traversal (CVE-2026-45532)
CVE-2026-75830 Vulnerability in path-traversal (CVE-2026-75830)
CVE-2026-74907 Path Traversal in path-traversal (CVE-2026-74907)
CVE-2026-15585 Path Traversal in path-traversal (CVE-2026-15585)
CVE-2026-67918 Path Traversal in path-traversal (CVE-2026-67918)
CVE-2026-75482 Path Traversal in path-traversal (CVE-2026-75482)
CVE-2026-40506 Path Traversal in path-traversal (CVE-2026-40506)
CVE-2026-50776 Path Traversal in path-traversal (CVE-2026-50776)
CVE-2026-56089 Vulnerability in path-traversal (CVE-2026-56089)
CVE-2026-59909 Vulnerability in path-traversal (CVE-2026-59909)
CVE-2026-16137 Path Traversal in path-traversal (CVE-2026-16137)
CVE-2026-74884 Vulnerability in path-traversal (CVE-2026-74884)
CVE-2026-74798 Path Traversal in path-traversal (CVE-2026-74798)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →