Weaknesses of type CWE-22

6,562 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2026-47932HIGHColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 2.3%CVE-2020-8222—A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interfEPSS 2.3%CVE-2020-8221—A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the EPSS 2.3%CVE-2026-73851MEDIUMKiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)EPSS 2.3%CVE-2022-1721HIGHPath Traversal in WellKnownServlet in jgraph/drawioEPSS 2.3%CVE-2017-16604—This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.EPSS 2.3%CVE-2017-16601—This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.EPSS 2.3%CVE-2012-10034HIGHClanSphere 2011.3 Local File Inclusion via cs_lang CookieEPSS 2.3%CVE-2021-38360HIGHwp-publications <= 0.0 Local File IncludeEPSS 2.3%CVE-2024-12087MEDIUMRsync: path traversal vulnerability in rsyncEPSS 2.3%CVE-2020-14523HIGHMitsubishi Electric Factory Automation Products Path TraversalEPSS 2.3%CVE-2026-71209HIGHaudiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path TraversalEPSS 2.2%CVE-2019-9886CRITICALeClass platform allows user to download arbitrary files without authenticationEPSS 2.2%CVE-2023-7327HIGHOzeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File ReadEPSS 2.2%CVE-2020-26295HIGHCMS Editor code executionEPSS 2.2%CVE-2023-33227HIGHDirectory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2024-54382MEDIUMWordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerabilityEPSS 2.2%CVE-2023-33226HIGHDirectory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2026-9777HIGHATEN Unizon restoreDB Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2026-9778HIGHATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%