Skip to content
securitytabs

Weakness

Path traversal

Using ../ tricks in a file name to read or write files outside the intended folder.

If an application builds file paths from user input, sequences like ../../ can climb out of the intended directory to reach configuration files, credentials or, when writing is possible, places where a file becomes code.

Path traversal in the news

Recent stories that mention it.

The weakness behind it

Its CWE entry, with CVEs in the news, attacker techniques and the controls that stop it.

Plain-language explainers written by SecurityTabs, matched to stories by name. All terms