Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CWE-22:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Weakness ID:22
Version:v4.17
Weakness Name:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerability Mapping:Allowed
Abstraction:Base
Structure:Simple
Status:Stable
Likelihood of Exploit:High
DetailsContent HistoryObserved CVE ExamplesReports
▼Submissions
Submission DateRelease DateSubmitterOrganizationVersionComment
2006-07-192006-07-19PLOVERN/ADraft 3

N/A

Submission Date: 2006-07-19

Release Date: 2006-07-19

Submitter: PLOVER

Organization: N/A

Version: Draft 3

Comment:

N/A

▼Modifications
Modification DateRelease DateModifierOrganizationVersionImportanceComment
2008-07-01N/AEric DalciCigitalN/AN/A

updated Potential_Mitigations, Time_of_Introduction

2008-08-15N/AN/AVeracodeN/AN/A

Suggested OWASP Top Ten 2004 mapping

2008-09-08N/ACWE Content TeamMITREN/AN/A

updated Alternate_Terms, Relationships, Other_Notes, Relationship_Notes, Relevant_Properties, Taxonomy_Mappings, Weakness_Ordinalities

2008-10-14N/ACWE Content TeamMITREN/AN/A

updated Description

2008-11-24N/ACWE Content TeamMITREN/AN/A

updated Relationships, Taxonomy_Mappings

2009-07-27N/ACWE Content TeamMITREN/AN/A

updated Potential_Mitigations

2010-02-16N/ACWE Content TeamMITREN/AN/A

updated Alternate_Terms, Applicable_Platforms, Common_Consequences, Demonstrative_Examples, Description, Detection_Factors, Likelihood_of_Exploit, Name, Observed_Examples, Other_Notes, Potential_Mitigations, References, Related_Attack_Patterns, Relationship_Notes, Relationships, Research_Gaps, Taxonomy_Mappings, Terminology_Notes, Time_of_Introduction, Weakness_Ordinalities

2010-06-21N/ACWE Content TeamMITREN/AN/A

updated Common_Consequences, Demonstrative_Examples, Description, Detection_Factors, Potential_Mitigations, References, Relationships

2010-09-27N/ACWE Content TeamMITREN/AN/A

updated Potential_Mitigations

2010-12-13N/ACWE Content TeamMITREN/AN/A

updated Potential_Mitigations

2011-03-29N/ACWE Content TeamMITREN/AN/A

updated Potential_Mitigations

2011-06-27N/ACWE Content TeamMITREN/AN/A

updated Relationships

2011-09-13N/ACWE Content TeamMITREN/AN/A

updated Potential_Mitigations, References, Relationships, Taxonomy_Mappings

2012-05-11N/ACWE Content TeamMITREN/AN/A

updated Demonstrative_Examples, References, Relationships

2012-10-30N/ACWE Content TeamMITREN/AN/A

updated Potential_Mitigations

2013-02-21N/ACWE Content TeamMITREN/AN/A

updated Observed_Examples

2013-07-17N/ACWE Content TeamMITREN/AN/A

updated Related_Attack_Patterns, Relationships

2014-06-23N/ACWE Content TeamMITREN/AN/A

updated Other_Notes, Research_Gaps

2014-07-30N/ACWE Content TeamMITREN/AN/A

updated Detection_Factors, Relationships, Taxonomy_Mappings

2015-12-07N/ACWE Content TeamMITREN/AN/A

updated Relationships

2017-01-19N/ACWE Content TeamMITREN/AN/A

updated Related_Attack_Patterns

2017-05-03N/ACWE Content TeamMITREN/AN/A

updated Demonstrative_Examples

2017-11-08N/ACWE Content TeamMITREN/AN/A

updated Affected_Resources, Causal_Nature, Likelihood_of_Exploit, References, Relationships, Relevant_Properties, Taxonomy_Mappings

2018-03-27N/ACWE Content TeamMITREN/AN/A

updated References, Relationships

2019-01-03N/ACWE Content TeamMITREN/AN/A

updated References, Related_Attack_Patterns, Relationships, Taxonomy_Mappings

2019-06-20N/ACWE Content TeamMITREN/AN/A

updated Related_Attack_Patterns, Relationships, Type

2019-09-19N/ACWE Content TeamMITREN/AN/A

updated Relationships

2020-02-24N/ACWE Content TeamMITREN/AN/A

updated Potential_Mitigations, Relationships

2020-06-25N/ACWE Content TeamMITREN/AN/A

updated Demonstrative_Examples, Potential_Mitigations

2020-08-20N/ACWE Content TeamMITREN/AN/A

updated Relationships

2020-12-10N/ACWE Content TeamMITREN/AN/A

updated Potential_Mitigations, Relationships

2021-03-15N/ACWE Content TeamMITREN/AN/A

updated Demonstrative_Examples, Relationships

2021-07-20N/ACWE Content TeamMITREN/AN/A

updated Relationships

2021-10-28N/ACWE Content TeamMITREN/AN/A

updated Observed_Examples, Relationships

2022-06-28N/ACWE Content TeamMITREN/AN/A

updated Observed_Examples, Relationships

2022-10-13N/ACWE Content TeamMITREN/AN/A

updated Observed_Examples, References

2023-01-31N/ACWE Content TeamMITREN/AN/A

updated Common_Consequences, Description, Detection_Factors

2023-04-27N/ACWE Content TeamMITREN/AN/A

updated Demonstrative_Examples, References, Relationships, Time_of_Introduction

2023-06-29N/ACWE Content TeamMITREN/AN/A

updated Mapping_Notes, Relationships

2023-10-26N/ACWE Content TeamMITREN/AN/A

updated Observed_Examples

2024-07-162024-07-16CWE Content TeamMITRE4.15N/A

updated Common_Consequences, Description, Diagram, Observed_Examples, Other_Notes, References

2024-11-192024-11-19CWE Content TeamMITRE4.16N/A

updated Demonstrative_Examples, Relationships

2025-04-032025-04-03CWE Content TeamMITRE4.17N/A

updated Relationships

Modification Date: 2008-07-01

Release Date: N/A

Modifier: Eric Dalci

Organization: Cigital

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations, Time_of_Introduction

Modification Date: 2008-08-15

Release Date: N/A

Modifier: N/A

Organization: Veracode

Version: N/A

Importance: N/A

Comment:

Suggested OWASP Top Ten 2004 mapping

Modification Date: 2008-09-08

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Alternate_Terms, Relationships, Other_Notes, Relationship_Notes, Relevant_Properties, Taxonomy_Mappings, Weakness_Ordinalities

Modification Date: 2008-10-14

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Description

Modification Date: 2008-11-24

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships, Taxonomy_Mappings

Modification Date: 2009-07-27

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations

Modification Date: 2010-02-16

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Alternate_Terms, Applicable_Platforms, Common_Consequences, Demonstrative_Examples, Description, Detection_Factors, Likelihood_of_Exploit, Name, Observed_Examples, Other_Notes, Potential_Mitigations, References, Related_Attack_Patterns, Relationship_Notes, Relationships, Research_Gaps, Taxonomy_Mappings, Terminology_Notes, Time_of_Introduction, Weakness_Ordinalities

Modification Date: 2010-06-21

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Common_Consequences, Demonstrative_Examples, Description, Detection_Factors, Potential_Mitigations, References, Relationships

Modification Date: 2010-09-27

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations

Modification Date: 2010-12-13

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations

Modification Date: 2011-03-29

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations

Modification Date: 2011-06-27

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships

Modification Date: 2011-09-13

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations, References, Relationships, Taxonomy_Mappings

Modification Date: 2012-05-11

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Demonstrative_Examples, References, Relationships

Modification Date: 2012-10-30

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations

Modification Date: 2013-02-21

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Observed_Examples

Modification Date: 2013-07-17

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Related_Attack_Patterns, Relationships

Modification Date: 2014-06-23

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Other_Notes, Research_Gaps

Modification Date: 2014-07-30

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Detection_Factors, Relationships, Taxonomy_Mappings

Modification Date: 2015-12-07

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships

Modification Date: 2017-01-19

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Related_Attack_Patterns

Modification Date: 2017-05-03

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Demonstrative_Examples

Modification Date: 2017-11-08

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Affected_Resources, Causal_Nature, Likelihood_of_Exploit, References, Relationships, Relevant_Properties, Taxonomy_Mappings

Modification Date: 2018-03-27

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated References, Relationships

Modification Date: 2019-01-03

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated References, Related_Attack_Patterns, Relationships, Taxonomy_Mappings

Modification Date: 2019-06-20

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Related_Attack_Patterns, Relationships, Type

Modification Date: 2019-09-19

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships

Modification Date: 2020-02-24

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations, Relationships

Modification Date: 2020-06-25

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Demonstrative_Examples, Potential_Mitigations

Modification Date: 2020-08-20

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships

Modification Date: 2020-12-10

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Potential_Mitigations, Relationships

Modification Date: 2021-03-15

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Demonstrative_Examples, Relationships

Modification Date: 2021-07-20

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Relationships

Modification Date: 2021-10-28

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Observed_Examples, Relationships

Modification Date: 2022-06-28

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Observed_Examples, Relationships

Modification Date: 2022-10-13

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Observed_Examples, References

Modification Date: 2023-01-31

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Common_Consequences, Description, Detection_Factors

Modification Date: 2023-04-27

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Demonstrative_Examples, References, Relationships, Time_of_Introduction

Modification Date: 2023-06-29

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Mapping_Notes, Relationships

Modification Date: 2023-10-26

Release Date: N/A

Modifier: CWE Content Team

Organization: MITRE

Version: N/A

Importance: N/A

Comment:

updated Observed_Examples

Modification Date: 2024-07-16

Release Date: 2024-07-16

Modifier: CWE Content Team

Organization: MITRE

Version: 4.15

Importance: N/A

Comment:

updated Common_Consequences, Description, Diagram, Observed_Examples, Other_Notes, References

Modification Date: 2024-11-19

Release Date: 2024-11-19

Modifier: CWE Content Team

Organization: MITRE

Version: 4.16

Importance: N/A

Comment:

updated Demonstrative_Examples, Relationships

Modification Date: 2025-04-03

Release Date: 2025-04-03

Modifier: CWE Content Team

Organization: MITRE

Version: 4.17

Importance: N/A

Comment:

updated Relationships

▼Contributions
Contributor DateRelease DateTypeContributorOrganizationVersionComment
2022-07-11N/AFeedbackNick JohnstonN/AN/A

Identified weakness in Perl demonstrative example

2024-02-292024-07-16ContentAbhi BalakrishnanN/A4.15

Provided diagram to improve CWE usability

2024-11-01N/AFeedbackDrew ButtnerMITREN/A

Identified weakness in "good code" for Python demonstrative example

Contributor Date: 2022-07-11

Release Date: N/A

Type: Feedback

Contributor: Nick Johnston

Organization: N/A

Version: N/A

Comment:

Identified weakness in Perl demonstrative example

Contributor Date: 2024-02-29

Release Date: 2024-07-16

Type: Content

Contributor: Abhi Balakrishnan

Organization: N/A

Version: 4.15

Comment:

Provided diagram to improve CWE usability

Contributor Date: 2024-11-01

Release Date: N/A

Type: Feedback

Contributor: Drew Buttner

Organization: MITRE

Version: N/A

Comment:

Identified weakness in "good code" for Python demonstrative example

▼Previous Name Entries
Change DatePrevious Entry NameVersion
2010-02-16

Path Traversal

N/A

Change Date: 2010-02-16

Version: N/A

Previous Entry Name: Path Traversal