Skip to content

CWE-44 · File and Path Handling

Path Equivalence: 'file.name' (Internal Dot)

1CVEs

1 CVEs with CWE-44 as their weakness

CVEs with CWE-44, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2025-24813In CISA KEVExploitedApache Tomcat Path Equivalence - Remote Code ExecutionApache Software Foundation · Apache Tomcat · CVSS 10 · 2025-03-1010.0100%2025-03-10

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in