Improper Limitation of a Pathname to a Restricted... · CVE-2025-60242 · GitHub Advisory Database · GitHub

Improper Limitation of a Pathname to a Restricted...

Unreviewed Published Nov 6, 2025 to the GitHub Advisory Database • Updated Nov 13, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Anatoly Download Counter download-counter allows Path Traversal.This issue affects Download Counter: from n/a through <= 1.4.

References

Published by the National Vulnerability Database

Nov 6, 2025

Published to the GitHub Advisory Database Nov 6, 2025

Last updated Nov 13, 2025

Weaknesses

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Learn more on MITRE.