Common Weakness Enumeration
CWE-25 Path Traversal: '/../filedir'
Description
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "/../" sequences that can resolve to a location that is outside of that directory.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-25 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-pj88-9xww-gxmh | CVE-2026-23877 | MODERATE |
Swing Music has a Directory Traversal & Filesystem can be accessed by a non-admin user |
2026-01-21 | |
| GHSA-4fg7-vxc8-qx5w | - | MODERATE | - |
rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution |
2025-01-03 |
| GHSA-32gq-x56h-299c | - | MODERATE |
age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution |
2024-12-20 | |
| GHSA-47h8-jmp3-9f28 | CVE-2024-56327 | HIGH |
pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution |
2024-12-20 |