{"id":1030,"date":"2023-04-17T11:49:04","date_gmt":"2023-04-17T11:49:04","guid":{"rendered":"https:\/\/www-dev.ubikasec.com\/en\/?p=1030"},"modified":"2023-09-19T14:21:42","modified_gmt":"2023-09-19T14:21:42","slug":"how-to-prevent-exploitation-of-path-traversal-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-prevent-exploitation-of-path-traversal-vulnerabilities\/","title":{"rendered":"How to prevent exploitation of Path Traversal vulnerabilities?"},"content":{"rendered":"

What is a Path Traversal\/ Directory Traversal flaw? <\/h2>\n

The Path Traversal<\/strong>, or Directory Traversal<\/strong> attack is an attack affecting the server side<\/strong> of web applications.
\nAlthough not clearly stated in the OWASP Top 10, the vulnerability can lead to a flaw present in this top: Broken Access Control (A5:2017-Broken Access Control | OWASP<\/a>)
\nThis vulnerability allows a user to have access to data or functionalities outside of their scope of action, for example, the fact that an ordinary user can modify the profile of any other user when this action is supposed to be reserved for administrators.
\nThe Path Traversal \/ Directory Traversal vulnerability consists of manipulating HTTP parameters, most often using GET. The GET request allows to modify the url, in order to include and have sensitive folders or files in a web page.
\nIMAAAAGE<\/p>\n","protected":false},"excerpt":{"rendered":"

Discover our solution and its features.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1030","post","type-post","status-publish","format-standard","hentry","category-posts"],"acf":{"headings":[{"acf_fc_layout":"base","title_category_icon":766,"title_category":"Post","title_category_color":"clr-pink","title":"How to prevent exploitation of Path Traversal<\/span> vulnerabilities?","title_color":"clr-white","title_description":"","title_description_theme":"content-text-dark","title_buttons":null,"background":"bg-gradient-purple-blue-bl","padding_top":"pt-xxlarge","padding_bottom":"pb-xxlarge","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":true,"separator_bottom_color":"sep-white","opt_breadcrumb":true,"opt_breadcrumb_theme":"breadcrumb-dark"}],"background_image":null,"modules":[{"acf_fc_layout":"photos","title":"","mod_title_color":"clr-white","mod_title_alignment":"align-left","images":[1250],"background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"wysiwyg","mod_wysiwyg":"

Consequences of a Path Traversal \/ Directory Traversal attack (Directory path traversal attack) <\/h2>\r\n\r\nThe Path Traversal<\/strong> flaw has some consequences.\r\n