Weaknesses of type CWE-22

6,564 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2022-31483CRITICALArbitrary file write via authenticated OSDP file uploadEPSS 1.8%CVE-2025-13801HIGHYoco Payments <= 3.9.0 - Unauthenticated Arbitrary File ReadEPSS 1.8%CVE-2024-33350CRITICALDirectory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via EPSS 1.8%CVE-2021-24638—OMGF < 4.5.4 - Unauthenticated Path Traversal in REST APIEPSS 1.8%CVE-2022-26884MEDIUMApache DolphinScheduler exposes files without authenticationEPSS 1.8%CVE-2023-37607HIGHDirectory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information via cEPSS 1.8%CVE-2018-16482—A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive informaEPSS 1.8%CVE-2014-125125HIGHA10 Networks AX Loadbalancer Path TraversalEPSS 1.8%CVE-2025-52562CRITICALConvey Panel Directory Traversal in LocaleController leading to Remote Code ExecutionEPSS 1.8%CVE-2019-19290MEDIUMA vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in the web interface of thEPSS 1.8%CVE-2019-19296MEDIUMA vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411EPSS 1.8%CVE-2020-3130MEDIUMCisco Unity Connection Directory Traversal VulnerabilityEPSS 1.8%CVE-2026-73697HIGHControl Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editorEPSS 1.8%CVE-2025-67506CRITICALPipesHub Vulnerable to Path Traversal through Unauthenticated Arbitrary File UploadEPSS 1.8%CVE-2023-27603CRITICALApache Linkis Mangaer module engineConn material upload exists Zip Slip issueEPSS 1.8%CVE-2020-5366HIGHDell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privilegEPSS 1.8%CVE-2024-27977HIGHA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete arbitrary EPSS 1.8%CVE-2026-50776HIGHDirectory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information andEPSS 1.8%CVE-2012-10061HIGHSockso Music Host Server <= 1.5 Path TraversalEPSS 1.8%CVE-2026-116690HIGHMLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourceEPSS 1.8%