17 matches found
CVE-2026-57441: Improper Resolution of Path Equivalence
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem-equivalent segment names. On...
CVE-2026-50568: Improper Resolution of Path Equivalence
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, SanitizeFilePath in pkg/utils/utils.go validated that a path stayed under a safe directory by calling strings.HasPrefixpath,...
CVE-2026-23674: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-58290: Improper Resolution of Path Equivalence
Denial of service DoS vulnerability in the office service. Successful exploitation of this vulnerability may affect availability...
CVE-2025-43298: Improper Resolution of Path Equivalence
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges...
CVE-2025-54107: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...
CVE-2024-6839: Improper Resolution of Path Equivalence
corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex...
CVE-2025-24470: Improper Resolution of Path Equivalence
An Improper Resolution of Path Equivalence vulnerability CWE-41 in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve source code via crafted HTTP requests...
CVE-2025-21219: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21269: Improper Resolution of Path Equivalence
Windows HTML Platforms Security Feature Bypass Vulnerability...
CVE-2025-21328: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21189: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21268: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21329: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2024-30036: Improper Resolution of Path Equivalence
Windows Deployment Services Information Disclosure Vulnerability...