Weaknesses of type CWE-22

6,635 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2023-28344HIGHAn issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers EPSS 0.9%CVE-2020-7495—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EPSS 0.9%CVE-2022-42136HIGHAuthenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had peEPSS 0.9%CVE-2024-44825HIGHDirectory Traversal vulnerability in Centro de Tecnologia da Informaco Renato Archer InVesalius3 v3.1.99995 allows attackers to write arbitrEPSS 0.9%CVE-2023-32676MEDIUMAutolab tar slip in Install Assessment functionality (`GHSL-2023-081`)EPSS 0.9%CVE-2026-93992HIGHGopeed through 2.0.0-beta.3 Arbitrary File Write via Path TraversalEPSS 0.9%CVE-2025-67818HIGHAn issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name withEPSS 0.9%CVE-2024-13981CRITICALLiveBos UploadFile.do Arbitrary File UploadEPSS 0.9%CVE-2024-31457HIGHgin-vue-admin background arbitrary code coverage vulnerabilityEPSS 0.9%CVE-2024-43022HIGHAn issue in the downloader.php component of TOSEI online store management system v4.02, v4.03, and v4.04 allows attackers to execute a direcEPSS 0.9%CVE-2022-28544MEDIUMPath traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to accessEPSS 0.9%CVE-2023-22901MEDIUMChangingTec MOTP - Path TraversalEPSS 0.9%CVE-2020-36629MEDIUMSimbCo httpster server.coffee fs.realpathSync path traversalEPSS 0.9%CVE-2023-29004MEDIUMPath Traversal Vulnerability in hap-wi/roxy-wi EPSS 0.9%CVE-2026-105032CRITICALEnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File WriteEPSS 0.9%CVE-2021-26619HIGHBigFileAgent arbitrary file Deleting vulnerabilityEPSS 0.9%CVE-2025-48370LOWauth-js Vulnerable to Insecure Path Routing from Malformed User InputEPSS 0.9%CVE-2025-28072HIGHPHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.EPSS 0.9%CVE-2024-0763HIGHImproper validation of document removal parameterEPSS 0.9%CVE-2024-12035HIGHCS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.9%