CWE-50


Path Equivalence: '//multiple/leading/slash'

The product accepts path input in the form of multiple leading slash ('//multiple/leading/slash') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.

We have discovered 360 live websites that are affected by CWE-50.

Contact us to get more info







CVEs

  • Count - 1



Website Distribution by Country

Number of websites using CWE-50
United States140 websites


Czech Republic42 websites
Germany31 websites
France29 websites
Poland20 websites
China16 websites
Netherlands8 websites
Canada7 websites
Mexico7 websites
Vietnam6 websites

Website Distribution by TLD

Number of websites using CWE-50
.com146 websites
.cz39 websites
.de24 websites
.fr19 websites
.pl17 websites
.org10 websites
.it10 websites
.ca5 websites
.ch5 websites
.nl5 websites

Newest CVEs

List of the most recent CVEs that are part of CWE-50
DiscoveredCVEDescriptionWebsites
Jun, 2023CVE-2023-34092 Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)360

The most widespread CVEs

List of the most common CVEs that are part of CWE-50
DiscoveredCVEDescriptionWebsites
Jun, 2023CVE-2023-34092 Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)360

Websites affected by CWE-50

Top websites that are affected by CWE-50. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.link Russia*,***
*********.ru Russia**,***
***.***.*****.ch United States**,***
******.it **,***
******.******.it **,***
****.***.gov United States**,***
****.****.me Japan**,***
********.com United States**,***
**************.com United States***,***
*****.ie Ireland***,***
See full domain list