Weaknesses of type CWE-22

5,839 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2024-27174CRITICALinsecure uploadEPSS 1.6%CVE-2026-27018HIGHGotenberg: Chromium deny-list bypass via case-insensitive URL schemeEPSS 1.6%CVE-2022-1518CRITICAL3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22EPSS 1.6%CVE-2011-10010CRITICALQuickShare File Server 1.2.1 Path Traversal RCEEPSS 1.6%CVE-2022-4030HIGHSimple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File DeletionEPSS 1.6%CVE-2023-5212CRITICALAI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_fileEPSS 1.6%CVE-2022-0401CRITICALPath Traversal in yuda-lyu/w-zipEPSS 1.6%CVE-2022-29834HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97EPSS 1.6%CVE-2022-39033CRITICALSmart eVision - Path Traversal -1EPSS 1.6%CVE-2024-7601HIGHLogsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion VulnerabilityEPSS 1.6%CVE-2021-41279HIGHZip Slip Vulnerability in BaserCMSEPSS 1.6%CVE-2026-41463HIGHProjeQtor < 12.4.4 ZipSlip Path Traversal via uploadPlugin.phpEPSS 1.6%CVE-2022-2557—WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and DeletionEPSS 1.6%CVE-2023-4616HIGHthumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read VulnerabilityEPSS 1.6%CVE-2020-3365MEDIUMCisco Enterprise NFV Infrastructure Software Path Traversal VulnerabilityEPSS 1.6%CVE-2023-4615HIGHupdateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read VulnerabilityEPSS 1.6%CVE-2009-3721—Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived frEPSS 1.6%CVE-2017-11162—Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users tEPSS 1.6%CVE-2025-69411HIGHWordPress ionCube tester plus plugin <= 1.3 - Arbitrary File Download vulnerabilityEPSS 1.6%CVE-2022-35918MEDIUMStreamlit directory traversal vulnerabilityEPSS 1.6%