Weaknesses of type CWE-22

6,634 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2026-24478HIGHAnythingLLM vulnerable to Path TraversalEPSS 0.9%CVE-2026-77068HIGHn8n before 2.34.1 Remote Code Execution via Path TraversalEPSS 0.9%CVE-2023-41578—Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.EPSS 0.9%CVE-2025-69874CRITICALnanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary fiEPSS 0.9%CVE-2025-5391HIGHWooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.9%CVE-2026-36848HIGHGigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.EPSS 0.9%CVE-2023-44306MEDIUM Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit thEPSS 0.9%CVE-2024-0406MEDIUMMholt/archiver: path traversal vulnerabilityEPSS 0.9%CVE-2026-69095HIGHOpenWrt luci-app-bmx7 Path Traversal via bmx7-infoEPSS 0.9%CVE-2022-47762HIGHIn gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.EPSS 0.9%CVE-2025-67160HIGHAn issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal.EPSS 0.9%CVE-2026-77807HIGHAcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' ParameterEPSS 0.9%CVE-2026-15990HIGHFormidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' ParameterEPSS 0.9%CVE-2026-12997HIGHGravity Forms <= 2.10.4 - Unauthenticated Arbitrary File Read via 'gform_uploaded_files' ParameterEPSS 0.9%CVE-2024-8769CRITICALArbitrary File Deletion via Relative Path Traversal in aimhubio/aimEPSS 0.9%CVE-2024-21677HIGHThis High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. This Path Traversal vulnerabilitEPSS 0.9%CVE-2020-24102HIGHDirectory Traversal vulnerability in Punkbuster pbsv.d64 2.351, allows remote attackers to execute arbitrary code.EPSS 0.9%CVE-2025-11914MEDIUMShenzhen Ruiming Technology Streamax Crocus DeviceFileReport.do download path traversalEPSS 0.9%CVE-2023-50265HIGHBazarr Arbitrary file read in /api/swaggerui/static endpointEPSS 0.9%CVE-2023-50264HIGHBazarr Arbitrary file read in /system/backup/download/ endpointEPSS 0.9%