top of page
< Back

Directory Traversal

Directory traversal is closely related to path traversal and occurs when weak file path handling lets attackers navigate outside approved directories. By manipulating path values, attackers may retrieve files from restricted folders, expose application secrets, or access internal system data. In enterprise environments, directory traversal can create serious risk when exposed files include credentials, API keys, configuration files, customer records, or application source code.

Directory Request Made → Weak Path Handling → Folder Boundaries Bypassed → Sensitive Files Retrieved → Directory Access Restricted

bottom of page