Weaknesses of type CWE-22

6,634 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2024-0964HIGHLFI in GradioEPSS 1.0%CVE-2026-114094HIGHDulwich before 1.2.9 Arbitrary File Write via DOS drive letter pathsEPSS 0.9%CVE-2026-7252HIGHWP-Optimize <= 4.5.2 - Authenticated (Author+) Arbitrary File Deletion via 'original-file' Post MetaEPSS 0.9%CVE-2026-112350HIGHSunhillo SureLine Path Traversal via radarUpdater.cgiEPSS 0.9%CVE-2022-40977HIGHPILZ: PASvisu and PMI affected by ZipSlipEPSS 0.9%CVE-2022-43975HIGHAn issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. A vulnerability in the webEPSS 0.9%CVE-2026-17147CRITICALMultiple Vulnerabilities in IBM API ConnectEPSS 0.9%CVE-2023-48848HIGHAn arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a craftEPSS 0.9%CVE-2023-23888HIGHWordPress Rank Math SEO plugin <= 1.0.107.2 - Local File Inclusion vulnerabilityEPSS 0.9%CVE-2026-2743CRITICALSEPPmail User Web Interface Arbitrary File Write to RCEEPSS 0.9%CVE-2025-11941MEDIUMe107 CMS Avatar image.php path traversalEPSS 0.9%CVE-2026-104746HIGHMotors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User MetaEPSS 0.9%CVE-2022-41951HIGHOroPlatform vulnerable to path traversal during temporary file manipulationsEPSS 0.9%CVE-2023-51232HIGHDirectory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive information via craftEPSS 0.9%CVE-2022-41212MEDIUMDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges EPSS 0.9%CVE-2024-7741MEDIUMwanglongcn ltcms API Endpoint downloadfile downloadFile path traversalEPSS 0.9%CVE-2005-10002MEDIUMalmosteffortless secure-files Plugin secure-files.php sf_downloads path traversalEPSS 0.9%CVE-2024-21547HIGHVersions of the package spatie/browsershot before 5.0.2 are vulnerable to Directory Traversal due to URI normalisation in the browser where EPSS 0.9%CVE-2025-42946MEDIUMDirectory Traversal vulnerability in SAP S/4HANA (Bank Communication Management)EPSS 0.9%CVE-2025-32431HIGHTraefik has a possible vulnerability with the path matchersEPSS 0.9%