Sign in Sign up
JA · EN · FR
SecPulse

Path Traversal

⚔️ Attack Types Related 14
slug: path-traversal

Explanation

パストラバーサルは「ファイル名を指定する箇所に `../../../etc/passwd` のような文字列を入れて、本来アクセスできないファイルを読み出す」攻撃です。 ファイルダウンロード機能や画像表示機能でよく見られます。 対策は「ユーザー入力のファイル名を、必ずホワイトリスト・固定ディレクトリに制限する」こと。
📌 Example
CVE-2024-57726 (SimpleHelp): zipファイル展開時のZip Slipにより、サーバー上の任意の場所にファイル書き込みされる脆弱性。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Remote Code Execution19 Server-Side Request Forgery17 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 1,343

ID Title
CVE-2026-33922 Path Traversal in path-traversal (CVE-2026-33922)
CVE-2026-16053 Vulnerability in path-traversal (CVE-2026-16053)
CVE-2026-13716 Vulnerability in path-traversal (CVE-2026-13716)
CVE-2026-73033 Path Traversal in wordpress (CVE-2026-73033)
CVE-2026-73030 Path Traversal in path-traversal (CVE-2026-73030)
CVE-2026-69112 Path Traversal in path-traversal (CVE-2026-69112)
CVE-2026-12339 Path Traversal in path-traversal (CVE-2026-12339)
CVE-2026-47754 Path Traversal in tomcat (CVE-2026-47754)
CVE-2026-18412 Vulnerability in path-traversal (CVE-2026-18412)
CVE-2026-15059 Path Traversal in path-traversal (CVE-2026-15059)
CVE-2026-72569 Path Traversal in path-traversal (CVE-2026-72569)
CVE-2026-72567 Path Traversal in path-traversal (CVE-2026-72567)
CVE-2026-72572 Path Traversal in path-traversal (CVE-2026-72572)
CVE-2026-72571 Path Traversal in path-traversal (CVE-2026-72571)
CVE-2026-66484 Path Traversal in path-traversal (CVE-2026-66484)
CVE-2026-21082 Vulnerability in path-traversal (CVE-2026-21082)
CVE-2026-19372 Path Traversal in path-traversal (CVE-2026-19372)
CVE-2026-19371 Path Traversal in path-traversal (CVE-2026-19371)
CVE-2026-19370 Path Traversal in path-traversal (CVE-2026-19370)
CVE-2026-19368 Path Traversal in path-traversal (CVE-2026-19368)
CVE-2026-19366 Path Traversal in path-traversal (CVE-2026-19366)
CVE-2026-19365 Path Traversal in path-traversal (CVE-2026-19365)
CVE-2026-19338 Path Traversal in path-traversal (CVE-2026-19338)
CVE-2026-19336 Path Traversal in path-traversal (CVE-2026-19336)
CVE-2026-19335 Path Traversal in path-traversal (CVE-2026-19335)
CVE-2026-19331 Path Traversal in path-traversal (CVE-2026-19331)
CVE-2026-19330 Path Traversal in path-traversal (CVE-2026-19330)
CVE-2026-10595 Vulnerability in path-traversal (CVE-2026-10595)
CVE-2026-19325 Path Traversal in path-traversal (CVE-2026-19325)
CVE-2026-19326 Path Traversal in path-traversal (CVE-2026-19326)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →