Weaknesses of type CWE-22

5,810 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2022-1390—Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File ReadEPSS 21.9%CVE-2025-54261CRITICALColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 21.3%CVE-2021-21234HIGHDirectory TraversalEPSS 21.0%CVE-2022-41657CRITICAL Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be uEPSS 20.9%CVE-2020-25237—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). WhenEPSS 20.6%CVE-2025-68472HIGHMindsDB has improper sanitation of filepath that leads to information disclosure and DOSEPSS 20.3%CVE-2025-12490HIGHNetgate pfSense CE Suricata Path Traversal Remote Code Execution VulnerabilityEPSS 20.1%CVE-2022-1119HIGHSimple File List <= 3.2.7 - Arbitrary File DownloadEPSS 20.0%CVE-2023-0156MEDIUMAll-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via TraversalEPSS 19.9%CVE-2021-41293HIGHECOA BAS controller - Path Traversal-3EPSS 19.9%CVE-2018-17934—NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the inEPSS 19.7%CVE-2026-33497HIGHLangflow: /profile_pictures/{folder_name}/{file_name} endpoint file readingEPSS 19.6%CVE-2025-30290HIGHColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 19.5%CVE-2019-25246HIGHBeward N100 H.264 VGA IP Camera M2.1.6 Authenticated File DisclosureEPSS 18.9%CVE-2024-50324HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authentiEPSS 18.7%CVE-2024-23472CRITICALSolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilityEPSS 18.6%CVE-2024-4956HIGHNexus Repository 3 - Path TraversalEPSS 18.2%CVE-2024-34787HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthentEPSS 17.8%CVE-2025-8356CRITICALPath Traversal leading to RCEEPSS 17.7%CVE-2025-61686CRITICALReact Router has Path Traversal in File Session StorageEPSS 17.6%