Weaknesses of type CWE-22

6,630 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2022-46137HIGHAeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.EPSS 1.5%CVE-2019-5438—Path traversal using symlink in npm harp module versions <= 0.29.0.EPSS 1.5%CVE-2025-47492HIGHWordPress Drag and Drop File Upload for Elementor Forms plugin <= 1.4.3 - Arbitrary File Deletion VulnerabilityEPSS 1.5%CVE-2025-4517CRITICALArbitrary writes via tarfile realpath overflowEPSS 1.5%CVE-2021-42542HIGHEmerson WirelessHART GatewayEPSS 1.5%CVE-2022-48285HIGHloadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.EPSS 1.5%CVE-2022-33164HIGHIBM Security Directory Server path traversalEPSS 1.5%CVE-2022-34271HIGHApache Atlas: zip path traversal in import functionalityEPSS 1.5%CVE-2020-29026CRITICALA directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with adminisEPSS 1.5%CVE-2022-47027CRITICALTimmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionarEPSS 1.5%CVE-2023-27066MEDIUMDirectory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrEPSS 1.5%CVE-2022-39034MEDIUMSmart eVision - Path Traversal -2EPSS 1.5%CVE-2023-42000CRITICALArcserve UDP Agent Unauthenticated Path Traversal File Upload EPSS 1.5%CVE-2021-21907MEDIUMA directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.0EPSS 1.5%CVE-2024-36116HIGHPath traversal in Reposilite javadoc file expansionEPSS 1.5%CVE-2021-21272HIGHzip slip in ORASEPSS 1.5%CVE-2022-36327MEDIUMPath traversal vulnerability leading to an arbitrary file write in Western Digital devicesEPSS 1.5%CVE-2022-31194HIGHPath traversal vulnerabilities in DSpace JSPUI submission uploadEPSS 1.5%CVE-2022-36065HIGHGrowthBook account creation and file upload vulnerability in self-hosted configurationsEPSS 1.5%CVE-2025-13661HIGHPath traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outsEPSS 1.5%