Weaknesses of type CWE-22

6,565 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2023-1163MEDIUMDrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversalEPSS 1.8%CVE-2022-35918MEDIUMStreamlit directory traversal vulnerabilityEPSS 1.8%CVE-2023-29380HIGHWarpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.EPSS 1.8%CVE-2017-16091—xtalk helps your browser talk to nodex, a simple web framework. xtalk is vulnerable to a directory traversal issue, giving an attacker accesEPSS 1.8%CVE-2020-15236HIGHDirectory Traversal in Wiki.jsEPSS 1.8%CVE-2025-59049HIGHMockoon has a Path Traversal and LFI in the static file serving endpointEPSS 1.8%CVE-2018-16475—A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server.EPSS 1.8%CVE-2022-22931—Path traversal in Apache James 3.6.1EPSS 1.8%CVE-2026-6377HIGHPath Traversal in Next4Biz's CSM (Customer Service Management)EPSS 1.8%CVE-2024-50329HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenEPSS 1.8%CVE-2024-27984HIGHA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific tEPSS 1.8%CVE-2025-3884HIGHCloudera Hue Ace Editor Directory Traversal Information Disclosure VulnerabilityEPSS 1.8%CVE-2021-36471CRITICALDirectory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and view sensitive information via /EPSS 1.8%CVE-2022-34026HIGHICEcoder v8.1 allows attackers to execute a directory traversal.EPSS 1.8%CVE-2024-13986HIGHNagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCEEPSS 1.7%CVE-2025-69411HIGHWordPress ionCube tester plus plugin <= 1.3 - Arbitrary File Download vulnerabilityEPSS 1.7%CVE-2021-32527HIGHQSAN Storage Manager - Path Traversal-2EPSS 1.7%CVE-2020-36898HIGHQiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File DeletionEPSS 1.7%CVE-2025-55169CRITICALWeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'EPSS 1.7%CVE-2026-51134HIGHThe C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pmlEPSS 1.7%