Vulnerabilities

Directory Traversal

English

Overview

An attack that improperly reads files in a directory it shouldn't have access to.

Details

An attack that exploits inadequate validation of a path to improperly access a file in an unintended directory. A typical technique smuggles a relative path notation like ../ into the input to climb back up into an unintended parent directory; it's also called path traversal.

More Security terms