CWE-21 · File and Path Handling
Pathname Traversal and Equivalence Errors
6CVEs
SortMost likely exploited
6 CVEs with CWE-21 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2016-1505The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.Radicale · Radicale · 2016-02-03 | – | 2.6% | 2016-02-03 |
| CVE-2014-2232Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vect…Infoware · Mapsuite · 2014-12-01 | – | 1.3% | 2014-12-01 |
| CVE-2019-11626routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request.Doorgets · Doorgets Cms · 2019-04-30 | – | 1.3% | 2019-04-30 |
| CVE-2016-15017fabarea media_upload UploadFileService.php getUploadedFileList pathname traversalfabarea · media_upload · CVSS 5.5 · 2023-01-10 | 5.5 | 0.9% | 2023-01-10 |
| CVE-2015-10030SUKOHI Surpass Surpass.php pathname traversalSUKOHI · Surpass · CVSS 5.5 · 2023-01-08 | 5.5 | 0.8% | 2023-01-08 |
| CVE-2024-7738yzane vscode-markdown-pdf Markdown File pathname traversalyzane · vscode-markdown-pdf · CVSS 3.3 · 2024-08-13 | 3.3 | 0.3% | 2024-08-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.