Weaknesses of type CWE-22

6,565 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2024-5017MEDIUMWhatsUp Gold AppProfileImport path traversal vulnerabilityEPSS 1.6%CVE-2024-27174CRITICALinsecure uploadEPSS 1.6%CVE-2026-45454MEDIUMMicrosoft SharePoint Remote Code Execution VulnerabilityEPSS 1.6%CVE-2022-2557—WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and DeletionEPSS 1.6%CVE-2020-3365MEDIUMCisco Enterprise NFV Infrastructure Software Path Traversal VulnerabilityEPSS 1.6%CVE-2022-0401CRITICALPath Traversal in yuda-lyu/w-zipEPSS 1.6%CVE-2024-7601HIGHLogsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion VulnerabilityEPSS 1.6%CVE-2022-33897MEDIUMA directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted netwoEPSS 1.6%CVE-2022-45867HIGHMyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achEPSS 1.6%CVE-2022-31159HIGHPartial Path Traversal in com.amazonaws:aws-java-sdk-s3 EPSS 1.6%CVE-2021-41279HIGHZip Slip Vulnerability in BaserCMSEPSS 1.6%CVE-2023-4615HIGHupdateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read VulnerabilityEPSS 1.6%CVE-2023-4616HIGHthumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read VulnerabilityEPSS 1.6%CVE-2009-3721—Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived frEPSS 1.6%CVE-2017-11162—Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users tEPSS 1.6%CVE-2023-26578HIGHArbitrary File Upload to Web Root In IDAttend’s IDWeb ApplicationEPSS 1.6%CVE-2022-43514HIGHA vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 EPSS 1.6%CVE-2021-21357HIGHBroken Access Control in Form FrameworkEPSS 1.6%CVE-2025-58438CRITICALinternetarchive is vulnerable to Directory Traversal through file downloadsEPSS 1.6%CVE-2019-5480—A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.EPSS 1.6%