Weaknesses of type CWE-22

5,991 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2025-53505MEDIUMGroup-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulneraEPSS 0.3%CVE-2025-13876MEDIUMRareprob HD Video Player All Formats App com.rocks.music.videoplayer path traversalEPSS 0.3%CVE-2026-54336MEDIUMJumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized AssetEPSS 0.3%CVE-2026-54613MEDIUMVvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme ParameterEPSS 0.3%CVE-2023-46122LOWArbitrary file write via archive extraction (Zip Slip) vulnerability in sbtEPSS 0.3%CVE-2025-61647LOWUserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rightsEPSS 0.3%CVE-2026-77258HIGHMCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()EPSS 0.3%CVE-2025-66206MEDIUMFrappe vulnerable to a path traversal allowing reading certain filesEPSS 0.3%CVE-2026-97226MEDIUMDbGate files-style Endpoint files.js fs.readFile path traversalEPSS 0.3%CVE-2026-97232MEDIUMvolotat Anagnorisis page.html start_streaming path traversalEPSS 0.3%CVE-2026-96678MEDIUMweiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversalEPSS 0.3%CVE-2026-47121MEDIUMSparkle: Binary delta apply intermediate-symlink traversal in malicious .deltaEPSS 0.3%CVE-2026-101142MEDIUMEleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversalEPSS 0.3%CVE-2024-47191HIGHpam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running EPSS 0.3%CVE-2026-22171HIGHOpenClaw < 2026.2.19 - Path Traversal in Feishu Media Temporary File NamingEPSS 0.3%CVE-2026-30915MEDIUMSFTPGo improperly sanitizes placeholders in group home directories/key prefixesEPSS 0.3%CVE-2026-15921LOWnvm path traversal via a malicious mirror's LTS codename writes outside the alias directoryEPSS 0.3%CVE-2026-0704MEDIUMIn affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field EPSS 0.3%CVE-2026-22762MEDIUMDell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912, contain an Improper Limitation of a Pathname to aEPSS 0.3%CVE-2025-36598MEDIUMDell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path TraveEPSS 0.3%