Path Traversal / Directory Traversal

High Severity Technical Guide

Vulnerability Description

Path traversal allows attackers to read arbitrary files on the application server by manipulating file path parameters using dot-dot-slash (../) sequences.

Remediation Guide

To resolve this vulnerability, follow these config changes or developer practices:

Sanitize file path inputs using basename functions, resolve absolute paths and verify they lie within a restricted base directory, or use database keys instead of raw filenames.

Verify Your Fix

After applying the remediation, run an external attack-surface scan to verify that the vulnerability is no longer detected by WebScanify.

Is your website vulnerable?

Run a free security scan now to identify missing headers, outdated JS, and other deployment vulnerabilities.