Common Weakness Enumeration

CWE-30 Path Traversal: '\dir\..\filename'

Description

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\dir\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-30 ordered by modification date.

1 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-q6gg-9f92-r9wg	CVE-2025-54386	HIGH	golang/github.com/traefik/traefik/v2 golang/github.com/traefik/traefik/v3	Traefik Client Plugin's Path Traversal Vulnerability Allows Arbitrary File Overwrite and Remote Code Execution	2025-11-27