CWE-552
AllowedFiles or Directories Accessible to External Parties
Abstraction: Base · Status: Draft
The product makes files or directories accessible to unauthorized actors, even though they should not be.
713 vulnerabilities reference this CWE, most recent first.
GHSA-MJM8-H7PJ-PXM5
Vulnerability from github – Published: 2022-05-13 01:37 – Updated: 2022-05-13 01:37IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.
{
"affected": [],
"aliases": [
"CVE-2017-1602"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-03-23T19:29:00Z",
"severity": "MODERATE"
},
"details": "IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.",
"id": "GHSA-mjm8-h7pj-pxm5",
"modified": "2022-05-13T01:37:05Z",
"published": "2022-05-13T01:37:05Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1602"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/132625"
},
{
"type": "WEB",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22014815"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/103477"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-MM47-557M-FXPP
Vulnerability from github – Published: 2024-04-04 00:33 – Updated: 2025-03-27 21:31WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and earlier allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request.
{
"affected": [],
"aliases": [
"CVE-2024-29225"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-04T00:15:07Z",
"severity": "MODERATE"
},
"details": "WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and earlier allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request.",
"id": "GHSA-mm47-557m-fxpp",
"modified": "2025-03-27T21:31:03Z",
"published": "2024-04-04T00:33:13Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29225"
},
{
"type": "WEB",
"url": "https://jvn.jp/en/vu/JVNVU95381465"
},
{
"type": "WEB",
"url": "https://www.elecom.co.jp/news/security/20240326-01"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-MM62-GWJ5-J285
Vulnerability from github – Published: 2025-08-22 21:31 – Updated: 2025-08-25 17:54Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated users (guests) to access via URL files uploaded by object entry and stored in document_library
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay:com.liferay.frontend.js.web"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.0.125"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay:com.liferay.object.dynamic.data.mapping.form.field.type"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.65"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "com.liferay:com.liferay.object.web"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.219"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2025-43758"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": true,
"github_reviewed_at": "2025-08-25T17:54:09Z",
"nvd_published_at": "2025-08-22T19:15:38Z",
"severity": "MODERATE"
},
"details": "Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated users (guests) to access via URL files uploaded by object entry and stored in document_library",
"id": "GHSA-mm62-gwj5-j285",
"modified": "2025-08-25T17:54:09Z",
"published": "2025-08-22T21:31:16Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43758"
},
{
"type": "WEB",
"url": "https://github.com/liferay/liferay-portal/commit/bf036898c413b6733918f4bfeba59896f1abb34a"
},
{
"type": "WEB",
"url": "https://github.com/liferay/liferay-portal/commit/ff4efcb59b6b9acf548d37787b8d4b3d1126fff8"
},
{
"type": "PACKAGE",
"url": "https://github.com/liferay/liferay-portal"
},
{
"type": "WEB",
"url": "https://liferay.atlassian.net/browse/LPE-18186"
},
{
"type": "WEB",
"url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43758"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N",
"type": "CVSS_V4"
}
],
"summary": "Liferay Portal\u0027s unauthenticated users can access loaded files via URL before submitting the object entry"
}
GHSA-MP6J-QH5H-CCJ4
Vulnerability from github – Published: 2023-07-30 09:30 – Updated: 2024-04-04 06:25Sysaid - CWE-552: Files or Directories Accessible to External Parties -
Authenticated users may exfiltrate files from the server via an unspecified method.
{
"affected": [],
"aliases": [
"CVE-2023-32226"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-07-30T08:15:47Z",
"severity": "MODERATE"
},
"details": " Sysaid - CWE-552: Files or Directories Accessible to External Parties -\u00a0\n\nAuthenticated users may exfiltrate files from the server via an unspecified method.\n\n",
"id": "GHSA-mp6j-qh5h-ccj4",
"modified": "2024-04-04T06:25:51Z",
"published": "2023-07-30T09:30:14Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32226"
},
{
"type": "WEB",
"url": "https://www.gov.il/en/Departments/faq/cve_advisories"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-MQX3-4HHF-CVPV
Vulnerability from github – Published: 2023-03-10 21:30 – Updated: 2026-06-01 15:30Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3.
{
"affected": [],
"aliases": [
"CVE-2023-1246"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-03-10T21:15:00Z",
"severity": "HIGH"
},
"details": "Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3.",
"id": "GHSA-mqx3-4hhf-cvpv",
"modified": "2026-06-01T15:30:29Z",
"published": "2023-03-10T21:30:20Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1246"
},
{
"type": "WEB",
"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0140"
},
{
"type": "WEB",
"url": "https://www.usom.gov.tr/bildirim/tr-23-0140"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-MV2P-XXQX-RG9J
Vulnerability from github – Published: 2023-06-16 18:30 – Updated: 2024-04-04 04:55jfinal CMS 5.1.0 has an arbitrary file read vulnerability.
{
"affected": [],
"aliases": [
"CVE-2023-34645"
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-06-16T18:15:09Z",
"severity": "HIGH"
},
"details": "jfinal CMS 5.1.0 has an arbitrary file read vulnerability.",
"id": "GHSA-mv2p-xxqx-rg9j",
"modified": "2024-04-04T04:55:10Z",
"published": "2023-06-16T18:30:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34645"
},
{
"type": "WEB",
"url": "https://github.com/jflyfox/jfinal_cms/issues/57"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-MV68-J39W-7QFQ
Vulnerability from github – Published: 2022-05-24 17:39 – Updated: 2022-05-24 17:39Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /icons/ directories via GET Parameter.
{
"affected": [],
"aliases": [
"CVE-2020-27368"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-01-14T16:15:00Z",
"severity": "MODERATE"
},
"details": "Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /icons/ directories via GET Parameter.",
"id": "GHSA-mv68-j39w-7qfq",
"modified": "2022-05-24T17:39:17Z",
"published": "2022-05-24T17:39:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27368"
},
{
"type": "WEB",
"url": "https://github.com/swzhouu/CVE-2020-27368"
}
],
"schema_version": "1.4.0",
"severity": []
}
GHSA-MWFM-2CM9-PFHJ
Vulnerability from github – Published: 2022-05-24 19:16 – Updated: 2022-05-24 19:16NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint.
{
"affected": [],
"aliases": [
"CVE-2021-35203"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-09-30T18:15:00Z",
"severity": "MODERATE"
},
"details": "NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint.",
"id": "GHSA-mwfm-2cm9-pfhj",
"modified": "2022-05-24T19:16:10Z",
"published": "2022-05-24T19:16:10Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-35203"
},
{
"type": "WEB",
"url": "https://www.netscout.com/securityadvisories"
}
],
"schema_version": "1.4.0",
"severity": []
}
GHSA-P25H-W2RQ-V3CW
Vulnerability from github – Published: 2024-10-11 18:32 – Updated: 2024-10-16 00:30A directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and BurgerEditor Limited Edition before 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of the uploaded files.
{
"affected": [],
"aliases": [
"CVE-2024-44807"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-11T18:15:08Z",
"severity": "MODERATE"
},
"details": "A directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and BurgerEditor Limited Edition before 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of the uploaded files.",
"id": "GHSA-p25h-w2rq-v3cw",
"modified": "2024-10-16T00:30:57Z",
"published": "2024-10-11T18:32:50Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44807"
},
{
"type": "WEB",
"url": "https://burger.d-zero.co.jp/blogs/archives/2"
},
{
"type": "WEB",
"url": "https://jvn.jp/en/jp/JVN54676967"
},
{
"type": "WEB",
"url": "https://jvn.jp/jp/JVN54676967"
},
{
"type": "WEB",
"url": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000109.html"
},
{
"type": "WEB",
"url": "http://basercms.com"
},
{
"type": "WEB",
"url": "http://burgereditor.com"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-P39H-6928-4FQ5
Vulnerability from github – Published: 2023-08-03 18:30 – Updated: 2024-04-04 06:31An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.
{
"affected": [],
"aliases": [
"CVE-2023-38948"
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-08-03T16:15:12Z",
"severity": "HIGH"
},
"details": "An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.",
"id": "GHSA-p39h-6928-4fq5",
"modified": "2024-04-04T06:31:58Z",
"published": "2023-08-03T18:30:35Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38948"
},
{
"type": "WEB",
"url": "https://gitee.com/CTF-hacker/pwn/issues/I7LI4E"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
Mitigation
When storing data in the cloud (e.g., S3 buckets, Azure blobs, Google Cloud Storage, etc.), use the provider's controls to disable public access.
CAPEC-150: Collect Data from Common Resource Locations
An adversary exploits well-known locations for resources for the purposes of undermining the security of the target. In many, if not most systems, files and resources are organized in a default tree structure. This can be useful for adversaries because they often know where to look for resources or files that are necessary for attacks. Even when the precise location of a targeted resource may not be known, naming conventions may indicate a small area of the target machine's file tree where the resources are typically located. For example, configuration files are normally stored in the /etc director on Unix systems. Adversaries can take advantage of this to commit other types of attacks.
CAPEC-639: Probe System Files
An adversary obtains unauthorized information due to improperly protected files. If an application stores sensitive information in a file that is not protected by proper access control, then an adversary can access the file and search for sensitive information.