Weaknesses of type CWE-22

6,636 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2024-32386HIGHDirectory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain senEPSS 0.8%CVE-2024-54452MEDIUMAn issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File IncluEPSS 0.8%CVE-2023-40280HIGHAn issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET requesEPSS 0.8%CVE-2023-5257LOWWhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversalEPSS 0.8%CVE-2022-43748MEDIUMImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology PrestoEPSS 0.8%CVE-2025-11031MEDIUMDataTables examples.php path traversalEPSS 0.8%CVE-2024-51747CRITICALArbitrary File Read and Delete in kanboardEPSS 0.8%CVE-2025-15031HIGHPath Traversal Vulnerability in mlflow/mlflowEPSS 0.8%CVE-2026-54670CRITICALWeGIA: Unauthenticated Auth Bypass + Local File InclusionEPSS 0.8%CVE-2026-32060HIGHOpenClaw < 2026.2.14 - Path Traversal in apply_patch via Crafted PathsEPSS 0.8%CVE-2023-44251HIGH** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FoEPSS 0.8%CVE-2026-102643HIGHAsyncSSH: SFTPServer Chroot EscapeEPSS 0.8%CVE-2022-45374HIGHWordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File InclusionEPSS 0.8%CVE-2025-34185HIGHIlevia EVE X1 Server 4.7.18.0.eden Unauthenticated File DisclosureEPSS 0.8%CVE-2024-22328HIGHIBM Maximo Application Suite information disclosureEPSS 0.8%CVE-2025-5158MEDIUMH3C SecCenter SMP-E1114P02 downloadSoftware path traversalEPSS 0.8%CVE-2026-53535MEDIUMActivepieces: Arbitrary file write in git-sync via path traversal and symlinksEPSS 0.8%CVE-2025-10472MEDIUMharry0703 MoneyPrinterTurbo URL video.py stream_video path traversalEPSS 0.8%CVE-2025-5161MEDIUMH3C SecCenter SMP-E1114P02 download operationDailyOut path traversalEPSS 0.8%CVE-2025-70084HIGHDirectory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete arbitrary files viaEPSS 0.8%