CWE-61
UNIX Symbolic Link (Symlink) Following
The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
We have discovered 9,275 live websites that are affected by CWE-61.
CVEs
- Count - 2
CWE References
Website Distribution by Country
Number of websites using CWE-61 United States | 1,161 websites |
 Germany | 2,181 websites |
 France | 1,321 websites |
 Turkey | 846 websites |
 Spain | 385 websites |
 Iran | 378 websites |
 Vietnam | 366 websites |
 GB | 349 websites |
 Netherlands | 346 websites |
 India | 248 websites |
Website Distribution by TLD
Number of websites using CWE-61| .com | 3,427 websites |
| .de | 1,359 websites |
| .fr | 404 websites |
| .org | 372 websites |
| .net | 337 websites |
| .nl | 281 websites |
| .it | 232 websites |
| .es | 190 websites |
| .co.uk | 184 websites |
| .ru | 132 websites |
Newest CVEs
List of the most recent CVEs that are part of CWE-61| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Dec, 2025 | CVE-2025-66431 | WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated use... | 9,237 |
| Dec, 2024 | CVE-2024-54148 | Gogs has a Path Traversal in file editing UI | 38 |
The most widespread CVEs
List of the most common CVEs that are part of CWE-61| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Dec, 2025 | CVE-2025-66431 | WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated use... | 9,237 |
| Dec, 2024 | CVE-2024-54148 | Gogs has a Path Traversal in file editing UI | 38 |
Websites affected by CWE-61
Top websites that are affected by CWE-61. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ********.com | United States | **,*** | |
| *******.****.museum | France | **,*** | |
| ******.com | Germany | **,*** | |
| *******.*********.ca |  Canada | ***,*** | |
| ****.*****.com | France | ***,*** | |
| **********.de | Germany | ***,*** | |
| ******.com | Germany | ***,*** | |
| ****************.nl | Netherlands | ***,*** | |
| *******.*****.uz |  Uzbekistan | ***,*** | |
| ********.******.com | Iran | ***,*** |