Weaknesses of type CWE-22

5,822 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2022-20719MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 2.7%CVE-2022-40443MEDIUMAn absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /oEPSS 2.7%CVE-2021-1385MEDIUMCisco IOx Application Environment Path Traversal VulnerabilityEPSS 2.7%CVE-2026-8713CRITICALAvada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry ValueEPSS 2.7%CVE-2020-10696HIGHA path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a maliciousEPSS 2.7%CVE-2020-3401MEDIUMCisco SD-WAN vManage Software Path Traversal VulnerabilityEPSS 2.6%CVE-2020-3381HIGHCisco SD-WAN vManage Software Directory Traversal VulnerabilityEPSS 2.6%CVE-2020-36939HIGHCassandra Web 0.5.0 - Remote File ReadEPSS 2.6%CVE-2021-24375—Motor theme < 3.1.0 - Local File InclusionEPSS 2.6%CVE-2018-14654MEDIUMThe Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to moEPSS 2.6%CVE-2022-2463MEDIUMISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22EPSS 2.6%CVE-2020-3440MEDIUMCisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite VulnerabilityEPSS 2.6%CVE-2012-10048HIGHZenoss 3.x showDaemonXMLConfig Command ExecutionEPSS 2.6%CVE-2023-27648CRITICALDirectory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary cEPSS 2.6%CVE-2024-36527MEDIUMpuppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol EPSS 2.6%CVE-2022-40701MEDIUMA directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speciallyEPSS 2.6%CVE-2022-3361MEDIUMUltimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via ShortcodesEPSS 2.6%CVE-2019-5484—Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackeEPSS 2.6%CVE-2022-39261HIGHTwig may load a template outside a configured directory when using the filesystem loaderEPSS 2.6%CVE-2018-19003—GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All veEPSS 2.6%