← All advisories

Path traversal vulnerabilities

Path traversal lets an attacker read or write files outside the intended directory by smuggling ../ sequences into file paths. In appliances and web applications it often exposes configuration files and credentials — and when writes are possible, it escalates to code execution via planted files.

Classification is assigned by the CSIRTS enrichment pipeline from the advisory text. The list below shows the latest advisories tagged path traversal, newest first, across national CERTs, vendor PSIRTs and vulnerability databases — exploited marks CVEs in the CISA KEV catalog.

Latest path traversal advisories

Other vulnerability classes