CWE-50
3 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 3Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102643
AsyncSSH: SFTPServer Chroot Escape
ronf · asyncssh
High8.8 - CVE-2026-66835
httpd mod_auth directory protection bypassed by a doubled slash in the request path
Erlang · OTP
High8.2 - CVE-2023-34092
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
vitejs · vite
High7.5