Skip to content
OpenAdvisories

Weakness (CWE)

CWE-552: Files or Directories Accessible to External Parties

Base Draft

The product makes files or directories accessible to unauthorized actors, even though they should not be.

More detail

Web servers, FTP servers, and similar servers may store a set of files underneath a "root" directory that is accessible to the server's users. Applications may store sensitive files underneath this root without also using access control to limit which users may request those files, if any. Alternately, an application might package multiple files or directories into an archive file (e.g., ZIP or tar), but the application might not exclude sensitive files that are underneath those directories.

How to prevent it (1 mitigation)

  1. Implementation, System Configuration, Operation

    When storing data in the cloud (e.g., S3 buckets, Azure blobs, Google Cloud Storage, etc.), use the provider's controls to disable public access.

Source: MITRE CWE-552

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.5
    CVE-2025-69428 Public exploit

    An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subd…

  • High 7.5
    CVE-2025-11371 Exploited Public exploit EPSS 92%

    Gladinet CentreStack and TrioFox Local File Inclusion Flaw

    In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This…

    Gladinet CentreStack and TrioFox
    KEV Nov 4, 2025
  • High 8.7
    CVE-2009-10005 Public exploit

    ContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode

    ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files from the filesystem. By crafting a POST request to /cgi-bin…

    ContentKeeper Technologies Web Appliance
  • High 7.5
    CVE-2023-33568 Public exploit EPSS 15%

    Dolibarr vulnerable to unauthenticated database access

    An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 7.5
    CVE-2023-25260 Public exploit

    Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.

  • High 7.8
    CVE-2022-40126 Public exploit

    A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate priv…

  • High 7.5
    CVE-2022-41343 Public exploit

    Dompdf allows remote file inclusion because URI validation failure does not halt font registration

    registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.

    dompdf/dompdf Packagist
  • High 7.5
    CVE-2021-43008 Public exploit EPSS 14%

    Files or Directories Accessible to External Parties in Adminer

    Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

    adminer adminer vrana/adminer Debian Ubuntu Packagist
  • High 8.8
    CVE-2021-25741 Public exploit

    Symlink Exchange Can Allow Host Filesystem Access

    A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go
  • High 7.5
    CVE-2021-39316 Public exploit EPSS 66%

    ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure

    The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.

    ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist Web / CMS
  • High 7.4
    CVE-2020-15175 Public exploit EPSS 70%

    Unauthenticated File Deletion in GLPI

    In GLPI before version 9.5.2, the `​pluginimage.send.php​` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes able to read all the …

    glpi-project glpi glpi Ubuntu
  • High 7.5
    CVE-2019-17221 Public exploit

    PhantomJS Arbitrary File Read

    PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open() function of the webpage module, which loads a specified URL and calls a given callback. An at…

    phantomjs phantomjs Ubuntu npm
  • High 7.8
    CVE-2017-16651 Exploited Public exploit EPSS 46%

    Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary fil…

    roundcube roundcube roundcubemail Debian Ubuntu Alpine
    KEV Nov 3, 2021