CWE-44 · File and Path Handling
Path Equivalence: 'file.name' (Internal Dot)
1CVEs
SortMost likely exploited
1 CVEs with CWE-44 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-24813In CISA KEVExploitedApache Tomcat Path Equivalence - Remote Code ExecutionApache Software Foundation · Apache Tomcat · CVSS 10 · 2025-03-10 | 10.0 | 100% | 2025-03-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.