# Potential Directory Traversal: /uploads/\* allows cross-directory file access

**URL:** <https://meta.discourse.org/t/potential-directory-traversal-uploads-allows-cross-directory-file-access/373351>\
**Category:** Product Support\
**Created:** [July 8, 2025, 10:36am UTC](https://meta.discourse.org/t/potential-directory-traversal-uploads-allows-cross-directory-file-access/373351 "2025-07-08T10:36:47Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)\
**Post date:** [July 8, 2025, 10:42am UTC](https://meta.discourse.org/t/potential-directory-traversal-uploads-allows-cross-directory-file-access/373351/2 "2025-07-08T10:42:08Z")

</div>

Maybe you are interested in the #secure-uploads feature.  
[https://meta.discourse.org/t/secure-uploads/meta/140017?u=moin](https://meta.discourse.org/t/secure-uploads/meta/140017)

---

_[View the full topic](https://meta.discourse.org/t/potential-directory-traversal-uploads-allows-cross-directory-file-access/373351)._
