Directory Traversal definition in Cybersecurity
Directory traversal is a web security vulnerability that allows an attacker to read arbitrary files on the server that is running an application, potentially leading to sensitive information disclosure.
Notable Incidents
- Apache Struts 2 Remote Code Execution vulnerability in 2017, allowing directory traversal attacks. Apache Struts Wikipedia
- ColdFusion Directory traversal in 2010, affecting Adobe ColdFusion servers.
How to Protect Your Network against Directory Traversal
- Validate and sanitize all user input.
- Implement proper access control and file permissions.