Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CAPEC-139:Relative Path Traversal
Attack Pattern ID:139
Version:v3.9
Attack Pattern Name:Relative Path Traversal
Abstraction:Detailed
Status:Draft
Likelihood of Attack:High
Typical Severity:High
DetailsContent HistoryRelated WeaknessesReports
1Weaknesses found
CWE-23
Relative Path Traversal
ShareView Details
Relative Path Traversal
Likelihood of Exploit-Not Available
Mapping-Allowed
Abstraction-Base
Found in416CVEs

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Impacts-
Read Files or DirectoriesDoS: Crash, Exit, or RestartModify Files or DirectoriesExecute Unauthorized Code or Commands
Tags-
Input ValidationExecute Unauthorized Code or Commands (impact)Read Files or Directories (impact)Modify Files or Directories (impact)DoS: Crash, Exit, or Restart (impact)
As Seen In-
CWE Cross-section