Weaknesses of type CWE-22

6,565 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2020-26065MEDIUMA vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to condEPSS 1.7%CVE-2024-41936HIGHVonets WiFi Bridges Path TraversalEPSS 1.7%CVE-2020-29494HIGHDell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit thEPSS 1.7%CVE-2026-27018HIGHGotenberg: Chromium deny-list bypass via case-insensitive URL schemeEPSS 1.7%CVE-2020-26279HIGHPath traversalEPSS 1.7%CVE-2008-3939HIGHDirectory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary filEPSS 1.7%CVE-2017-16153—gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.EPSS 1.7%CVE-2021-43795HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeriaEPSS 1.7%CVE-2026-116067HIGHPaisa before 0.7.8 Path Traversal via Editor and Sheet APIEPSS 1.7%CVE-2022-24424HIGHDell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may poEPSS 1.7%CVE-2023-2278CRITICALWP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_actionEPSS 1.7%CVE-2010-20109HIGHBarracuda Spam & Virus Firewall "locale" Path TraversalEPSS 1.7%CVE-2017-16109—easyquick is a simple web server. easyquick is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by plaEPSS 1.7%CVE-2017-16179—dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" EPSS 1.7%CVE-2017-16222—elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placingEPSS 1.7%CVE-2020-6768HIGHPath Traversal in Bosch Video Management System (BVMS)EPSS 1.7%CVE-2023-29478CRITICALBiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on thEPSS 1.7%CVE-2022-1518CRITICAL3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22EPSS 1.7%CVE-2021-39109HIGHThe renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traEPSS 1.7%CVE-2021-32516HIGHQSAN Storage Manager - Path TraversalEPSS 1.7%