Weaknesses of type CWE-22

5,865 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2020-1606MEDIUMJunos OS: Path traversal vulnerability in J-WebEPSS 0.9%CVE-2026-73033HIGHSucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.phpEPSS 0.9%CVE-2024-10626HIGHWooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.9%CVE-2026-77068HIGHn8n before 2.34.1 Remote Code Execution via Path TraversalEPSS 0.9%CVE-2022-50950HIGHWebile 1.0.1 Directory Traversal Vulnerability via Web ApplicationEPSS 0.9%CVE-2023-41578—Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.EPSS 0.9%CVE-2025-32431HIGHTraefik has a possible vulnerability with the path matchersEPSS 0.9%CVE-2022-47762HIGHIn gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.EPSS 0.9%CVE-2026-77807HIGHAcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' ParameterEPSS 0.9%CVE-2024-0406MEDIUMMholt/archiver: path traversal vulnerabilityEPSS 0.9%CVE-2023-44306MEDIUM Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit thEPSS 0.9%CVE-2026-69095HIGHOpenWrt luci-app-bmx7 Path Traversal via bmx7-infoEPSS 0.9%CVE-2026-36848HIGHGigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.EPSS 0.9%CVE-2026-50234HIGHLyrion Music Server 9.2.0 Path Traversal File ReadEPSS 0.9%CVE-2026-12997HIGHGravity Forms <= 2.10.4 - Unauthenticated Arbitrary File Read via 'gform_uploaded_files' ParameterEPSS 0.9%CVE-2026-9559CRITICALA path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign importsEPSS 0.9%CVE-2024-12065HIGHLocal File Inclusion in haotian-liu/llavaEPSS 0.9%CVE-2025-11941MEDIUMe107 CMS Avatar image.php path traversalEPSS 0.9%CVE-2024-21677HIGHThis High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. This Path Traversal vulnerabilitEPSS 0.9%CVE-2020-24102HIGHDirectory Traversal vulnerability in Punkbuster pbsv.d64 2.351, allows remote attackers to execute arbitrary code.EPSS 0.9%