Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2023-07-14 CVE-2023-38337 Path Traversal vulnerability in Rswag Project Rswag
rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.
network
low complexity
rswag-project CWE-22
7.5
7.5
2023-07-13 CVE-2023-34135 Path Traversal vulnerability in Sonicwall Analytics and Global Management System
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service.
network
low complexity
sonicwall CWE-22
6.5
6.5
2023-07-13 CVE-2023-34129 Path Traversal vulnerability in Sonicwall Analytics and Global Management System
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges.
network
low complexity
sonicwall CWE-22
8.8
8.8
2023-07-13 CVE-2023-34125 Path Traversal vulnerability in Sonicwall Analytics and Global Management System
Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges.
network
low complexity
sonicwall CWE-22
6.5
6.5
2023-07-12 CVE-2023-26563 Path Traversal vulnerability in Syncfusion Nodejs File System Provider 0102271
The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal.
network
low complexity
syncfusion CWE-22
critical
 9.8
9.8
2023-07-12 CVE-2023-26564 Path Traversal vulnerability in Syncfusion EJ2 Aspcore File Provider
The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal.
network
low complexity
syncfusion CWE-22
critical
 9.8
9.8
2023-07-12 CVE-2023-37960 Path Traversal vulnerability in Jenkins Mathworks Polyspace
Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems.
network
low complexity
jenkins CWE-22
6.5
6.5
2023-07-11 CVE-2022-23447 Path Traversal vulnerability in Fortinet Fortiextender Firmware
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interface 7.0.0 through 7.0.3, 4.2.0 through 4.2.4, 4.1.1 through 4.1.8, 4.0.0 through 4.0.2, 3.3.0 through 3.3.2, 3.2.1 through 3.2.3, 5.3 all versions may allow an unauthenticated and remote attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
network
low complexity
fortinet CWE-22
7.5
7.5
2023-07-11 CVE-2023-25606 Path Traversal vulnerability in Fortinet Fortianalyzer and Fortimanager
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4  all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
network
low complexity
fortinet CWE-22
6.5
6.5
2023-07-11 CVE-2023-34117 Path Traversal vulnerability in Zoom Software Development KIT
Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access.
local
low complexity
zoom CWE-22
3.3
3.3