Weaknesses of type CWE-22

5,839 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2022-48483HIGH3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/dowEPSS 1.7%CVE-2022-2926MEDIUMDownload Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path TraversalEPSS 1.7%CVE-2022-32199MEDIUMdb_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the EPSS 1.7%CVE-2024-50329HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenEPSS 1.7%CVE-2025-1743MEDIUMzyx0814 Pichome index.php path traversalEPSS 1.7%CVE-2020-7522—Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line SoftEPSS 1.7%CVE-2020-7521—Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line SoftEPSS 1.7%CVE-2019-7007HIGHAvaya Equinox Conferencing Management (iView) Directory Traversal VulnerabilityEPSS 1.7%CVE-2023-32309HIGHArbitrary file inclusion with the pymdowm-snippets extensionEPSS 1.7%CVE-2019-13157—nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename withiEPSS 1.7%CVE-2022-39296HIGHPath traversal in MelisAssetManagerEPSS 1.7%CVE-2022-37866HIGHApache Ivy allows path traversal in the presence of a malicious repositoryEPSS 1.7%CVE-2015-10134HIGHSimple Backup <= 2.7.10 - Arbitrary File Download via Path TraversalEPSS 1.7%CVE-2021-38452HIGHMoxa MXview Network Management SoftwareEPSS 1.7%CVE-2018-16479—Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes EPSS 1.7%CVE-2023-27067HIGHDirectory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via craftEPSS 1.6%CVE-2026-54917HIGHSeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket accessEPSS 1.6%CVE-2021-43795HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeriaEPSS 1.6%CVE-2022-1657HIGHJupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File InclusionEPSS 1.6%CVE-2024-5017MEDIUMWhatsUp Gold AppProfileImport path traversal vulnerabilityEPSS 1.6%