Weaknesses of type CWE-22

5,839 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2020-15124CRITICALPath traversal in Goobi viewer CoreEPSS 1.5%CVE-2024-49082MEDIUMWindows File Explorer Information Disclosure VulnerabilityEPSS 1.5%CVE-2021-37317CRITICALDirectory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers toEPSS 1.5%CVE-2024-27081HIGHESPHome remote code execution via arbitrary file writeEPSS 1.5%CVE-2022-50792HIGHSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure VulnerabilityEPSS 1.5%CVE-2025-4206HIGHWordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg <= 4.1.1.2 - Authenticated (Administrator+) Arbitrary File DeletionEPSS 1.5%CVE-2010-0481MEDIUMThe kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate aEPSS 1.5%CVE-2020-15230HIGHArbitrary file read un VaporEPSS 1.5%CVE-2019-15596—A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within tEPSS 1.5%CVE-2026-27825CRITICALMCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachmentEPSS 1.5%CVE-2022-31159HIGHPartial Path Traversal in com.amazonaws:aws-java-sdk-s3 EPSS 1.5%CVE-2020-13377HIGHThe web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attackerEPSS 1.5%CVE-2026-5489MEDIUMDriveLock Directory Traversal Information Disclosure VulnerabilityEPSS 1.5%CVE-2026-23482HIGHBlinko: Unauthorized Arbitrary File Read - /api/file/tempEPSS 1.5%CVE-2024-4346CRITICALStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File DeletionEPSS 1.5%CVE-2020-12147MEDIUMUnauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.EPSS 1.5%CVE-2025-3486HIGHAllegra isZipEntryValide Directory Traversal Remote Code Execution VulnerabilityEPSS 1.5%CVE-2026-45454MEDIUMMicrosoft SharePoint Remote Code Execution VulnerabilityEPSS 1.5%CVE-2026-7411CRITICALIn Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauEPSS 1.5%CVE-2024-7776HIGHArbitrary File Overwrite in onnx/onnxEPSS 1.5%