Weaknesses of type CWE-22

6,636 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2024-5273MEDIUMJenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing EPSS 0.8%CVE-2022-36221MEDIUMNokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to read any named pipe filEPSS 0.8%CVE-2023-5355HIGHAwesome Support < 6.1.5 - Submitter+ Arbitrary File DeletionEPSS 0.8%CVE-2024-4941HIGHLocal File Inclusion in JSON component in gradio-app/gradioEPSS 0.8%CVE-2025-5014HIGHHome Villas | Real Estate WordPress Theme <= 2.8 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.8%CVE-2025-2932HIGHJKDEVKIT <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.8%CVE-2024-50336MEDIUMmatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversalEPSS 0.8%CVE-2025-40629HIGHPath Traversal vulnerability in PNETLabEPSS 0.8%CVE-2026-96651HIGHPlex Media Server path traversalEPSS 0.8%CVE-2026-25475MEDIUMOpenClaw Vulnerable to Local File Inclusion via MEDIA: Path ExtractionEPSS 0.8%CVE-2025-58161LOWMobSF Path Traversal in GET /download/<filename> using absolute filenamesEPSS 0.8%CVE-2025-25652HIGHIn Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directoryEPSS 0.8%CVE-2024-1790MEDIUMAjax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File ReadEPSS 0.8%CVE-2022-44299MEDIUMSiteServerCMS 7.1.3 sscms has a file read vulnerability.EPSS 0.8%CVE-2026-1311HIGHWorry Proof Backup <= 0.2.4 - Authenticated (Subscriber+) Path Traversal via Backup UploadEPSS 0.8%CVE-2023-7309CRITICALDahua Smart Park Integrated Management Platform Front-End Arbitrary File UploadEPSS 0.8%CVE-2025-66051MEDIUMPath traversal in Vivotek IP7137 camerasEPSS 0.8%CVE-2023-47624HIGHAudiobookshelf Arbitrary File Read VulnerabilityEPSS 0.8%CVE-2024-48885MEDIUMA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1EPSS 0.8%CVE-2021-47921HIGHFree Photo & Video Vault 0.0.2 Directory Traversal Vulnerability via Web RequestEPSS 0.8%