Weaknesses of type CWE-22

6,635 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2025-60722MEDIUMMicrosoft OneDrive for Android Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-7551MEDIUMjuzaweb CMS Theme Editor default path traversalEPSS 0.9%CVE-2024-45188MEDIUMMage AI file content request remote arbitrary file leakEPSS 0.9%CVE-2024-27121HIGHPath traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary filEPSS 0.9%CVE-2024-8704HIGHAdvanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_localeEPSS 0.9%CVE-2026-57200HIGHAsterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCEEPSS 0.9%CVE-2024-46645HIGHeNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.EPSS 0.9%CVE-2025-67076HIGHDirectory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system viaEPSS 0.9%CVE-2024-46648HIGHeNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.EPSS 0.9%CVE-2024-27765MEDIUMDirectory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateEPSS 0.9%CVE-2025-65287HIGHAn unauthenticated directory traversal vulnerability in cgi-bin/upload.cgi in SNMP Web Pro 1.1 allows a remote attacker to read arbitrary fiEPSS 0.9%CVE-2024-57451HIGHChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to EPSS 0.9%CVE-2022-31475MEDIUMWordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerabilityEPSS 0.9%CVE-2025-0461MEDIUMShanghai Lingdang Information Technology Lingdang CRM index.php path traversalEPSS 0.9%CVE-2025-7643CRITICALAttachment Manager <= 2.1.2 - Unauthenticated Arbitrary File DeletionEPSS 0.9%CVE-2025-26692CRITICALQuick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If eEPSS 0.9%CVE-2024-23904HIGHJenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a fEPSS 0.9%CVE-2024-3078MEDIUMQdrant Full Snapshot REST API snapshots.rs path traversalEPSS 0.9%CVE-2024-47464MEDIUMAuthenticated Path Traversal Vulnerability Leads to a Remote Unauthorized Access to FilesEPSS 0.9%CVE-2021-43988MEDIUMICSA-22-109-03 FANUC ROBOGUIDE Simulation PlatformEPSS 0.9%