Relative Path Traversal is a vulnerability class where an attacker can access files or directories outside the intended scope by manipulating relative path inputs, typically due to insufficient input validation or improper path normalization.
Relative Path Traversal is a vulnerability class where an attacker can access files or directories outside the intended scope by manipulating relative path inputs, typically due to insufficient input validation or improper path normalization. When exploited, it can lead to sensitive file disclosure, and in some cases code execution or privilege escalation, making it a persistent risk for web-facing applications and services. Recent guidance and disclosures underscore its relevance by illustrating real-world exploitation contexts in network appliances and web servers.
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
Two vulnerabilities in FortiWeb have been identified, both exploited in the wild. The first, a relative path traversal vulnerability (CWE-23), allows unauthenticated attackers to execute administrative commands via…
CVE-2025-64756 identifies a command injection vulnerability in the glob CLI affecting versions 10.3.7 to 11.0.3. CVE-2025-64446 reveals a relative path traversal vulnerability in Fortinet FortiWeb versions 8.0.0 to…
Two significant vulnerabilities have been identified affecting various software versions. CVE-2025-64756 involves a command injection vulnerability in the glob CLI from versions 10.3.7 to 11.0.3. CVE-2025-64446 is a…
Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows…