Common Weakness Enumeration
CWE-34 Path Traversal: '....//'
Description
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '....//' (doubled dot dot slash) sequences that can resolve to a location that is outside of that directory.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-34 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-3227-r97m-8j95 | - | HIGH | - |
Relative Path Traversal in afire serve_static |
2022-04-22 |