Weaknesses of type CWE-22

6,475 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2019-10220HIGHLinux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.EPSS 5.1%CVE-2019-12691MEDIUMCisco Firepower Management Center Directory Traversal VulnerabilityEPSS 5.1%CVE-2026-2493HIGHIceWarp collaboration Directory Traversal Information Disclosure VulnerabilityEPSS 5.0%CVE-2024-7340HIGHW&B Weave server remote arbitrary file leak and privilege escalationEPSS 5.0%CVE-2021-24970—All-In-One-Gallery < 2.5.0 - Admin+ Local File InclusionEPSS 5.0%CVE-2024-34832CRITICALDirectory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded toEPSS 5.0%CVE-2021-24453—Include Me <= 1.2.1 - Authenticated Remote Code Execution (RCE) via LFI log poisoningEPSS 5.0%CVE-2018-1162—This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2EPSS 4.9%CVE-2019-13551—Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplEPSS 4.9%CVE-2026-24208MEDIUMNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vEPSS 4.9%CVE-2020-14507—Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an attacker to create/dowEPSS 4.9%CVE-2025-2505CRITICALAge Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang'EPSS 4.9%CVE-2020-1631HIGHOut of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) servicesEPSS 4.9%KEVCVE-2017-16610—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. AuthenticatiEPSS 4.8%CVE-2020-6109HIGHAn exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A speciallEPSS 4.8%CVE-2021-3762—A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted containeEPSS 4.8%CVE-2018-14806—Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code.EPSS 4.8%CVE-2013-3993MEDIUMIBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access unEPSS 4.8%KEVCVE-2023-29887HIGHA Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the FilEPSS 4.7%CVE-2024-12088MEDIUMRsync: --safe-links option bypass leads to path traversalEPSS 4.6%