Weaknesses of type CWE-22

6,564 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2015-10134HIGHSimple Backup <= 2.7.10 - Arbitrary File Download via Path TraversalEPSS 1.9%CVE-2022-37934MEDIUMA potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotelEPSS 1.9%CVE-2025-30005HIGHXorcom CompletePBX <= 5.2.35 Authenticated Path Traversal & File DeletionEPSS 1.9%CVE-2022-41154HIGHA directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specialEPSS 1.9%CVE-2025-3485HIGHAllegra extractFileFromZip Directory Traversal Remote Code Execution VulnerabilityEPSS 1.9%CVE-2018-3734—stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read conEPSS 1.9%CVE-2018-4861—A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/EPSS 1.9%CVE-2024-53586MEDIUMAn issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. BEPSS 1.9%CVE-2020-15239LOWDirectory Traversal in xmpp-http-uploadEPSS 1.9%CVE-2024-32258HIGHThe network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authenEPSS 1.9%CVE-2024-3571MEDIUMPath Traversal in langchain-ai/langchainEPSS 1.9%CVE-2021-43815MEDIUMGrafana directory traversal for `.cvs` filesEPSS 1.9%CVE-2024-22779HIGHDirectory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote attacker to execute arbitrary code via the loEPSS 1.9%CVE-2021-28172HIGHVangene deltaFlow E-platform - Path TraversalEPSS 1.9%CVE-2026-1557HIGHWP Responsive Images <= 1.0 - Unauthenticated Path Traversal to Arbitrary File Read via srcEPSS 1.9%CVE-2021-37712HIGHArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksEPSS 1.9%CVE-2022-39040HIGHaEnrich a+HRD - Path TraversalEPSS 1.9%CVE-2020-35460MEDIUMcommon/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writinEPSS 1.9%CVE-2026-25055HIGHn8n Arbitrary File Write on Remote Systems via SSH NodeEPSS 1.9%CVE-2021-32633MEDIUMRemote Code Execution via traversal in TAL expressionsEPSS 1.9%