Weaknesses of type CWE-22

5,906 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2025-12062HIGHWP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File InclusionEPSS 0.7%CVE-2026-72569CRITICALcube-root directory-serve - Unauthenticated Path Traversal Arbitrary File DeletionEPSS 0.7%CVE-2025-13435MEDIUMDreampie Resty HttpClient HttpClient.java request path traversalEPSS 0.7%CVE-2026-4659HIGHUnlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path TraversalEPSS 0.7%CVE-2026-27598HIGHDagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directoryEPSS 0.7%CVE-2025-24611MEDIUMWordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerabilityEPSS 0.7%CVE-2026-101070MEDIUMdbgate Files Endpoint runners.js files path traversalEPSS 0.7%CVE-2025-32671HIGHWordPress Print Science Designer plugin <= 1.3.155 - Arbitrary File Download vulnerabilityEPSS 0.7%CVE-2023-39506HIGHPDF-XChange Editor createDataObject Directory Traversal Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-47627CRITICALNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lEPSS 0.7%CVE-2026-32846HIGHOpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File ReadEPSS 0.7%CVE-2026-15435CRITICALIBM App Connect Enterprise is vulnerable to arbitrary file write vulnerabilityEPSS 0.7%CVE-2026-35593MEDIUMTrilium Notes has Local File Inclusion via upload modified file API endpointEPSS 0.7%CVE-2025-1973MEDIUMExport and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file FunctionEPSS 0.7%CVE-2025-3897MEDIUMEUCookieLaw <= 2.7.2 - Unauthenticated Arbitrary File ReadEPSS 0.7%CVE-2025-11139MEDIUMBjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversalEPSS 0.7%CVE-2025-9801MEDIUMSimStudioAI sim path traversalEPSS 0.7%CVE-2026-1776MEDIUMCamaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File ReadEPSS 0.7%CVE-2026-13186HIGHAppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.7%CVE-2026-76652MEDIUMAuthenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR600EPSS 0.7%