Weaknesses of type CWE-22

6,636 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2026-58166HIGHOpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and DeleteEPSS 0.9%CVE-2024-27768CRITICALUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'EPSS 0.9%CVE-2026-18554HIGHIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.9%CVE-2023-34208MEDIUMPath Traversal in EasyUse MailHunter UltimateEPSS 0.9%CVE-2025-34058HIGHHikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File ReadEPSS 0.9%CVE-2026-17239CRITICALMultiple Vulnerabilities in IBM API ConnectEPSS 0.9%CVE-2021-33722—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability EPSS 0.9%CVE-2026-84889HIGHA path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystemEPSS 0.9%CVE-2026-40076CRITICALOpenMRS Core arbitrary file write and code execution via Zip Slip in module uploadEPSS 0.9%CVE-2024-8875MEDIUMvedees wcms finder.php path traversalEPSS 0.9%CVE-2026-112946MEDIUMVite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machineEPSS 0.9%CVE-2024-12850MEDIUMDatabase Backup and check Tables Automated With Scheduler 2024 <= 2.32 - Authenticated (Admin+) Arbitrary File ReadEPSS 0.9%CVE-2024-23721HIGHA Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calEPSS 0.9%CVE-2025-54141HIGHViewVC's standalone server exposes arbitrary server filesystem contentEPSS 0.9%CVE-2023-27577MEDIUMPath Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarumEPSS 0.9%CVE-2024-32117MEDIUMAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.EPSS 0.9%CVE-2021-47751MEDIUMCuteEditor for PHP 6.6 - Directory TraversalEPSS 0.9%CVE-2026-67200HIGHPerspective 5.0.0 Path Traversal via cwd_static_file_handlerEPSS 0.9%CVE-2023-27475HIGHGoutil vulnerable to path traversal when unzipping filesEPSS 0.8%CVE-2024-32386HIGHDirectory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain senEPSS 0.8%