Weaknesses of type CWE-22

6,630 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2026-17614MEDIUMWildfly-core: path traversal on wildfly domain controllerEPSS 1.2%CVE-2026-76431MEDIUMCisco Identity Services Engine Arbitrary File Deletion VulnerabilityEPSS 1.2%CVE-2026-76432MEDIUMCisco Identity Services Engine Arbitrary File Write VulnerabilityEPSS 1.2%CVE-2021-33555HIGHA vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-GatewayEPSS 1.2%CVE-2021-33726—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files EPSS 1.2%CVE-2024-1974HIGHHT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory TraversalEPSS 1.2%CVE-2026-105795LOWKiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsEPSS 1.2%CVE-2023-36822MEDIUMUptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data lossEPSS 1.2%CVE-2025-37095MEDIUMA directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.EPSS 1.2%CVE-2024-23657HIGHPath Traversal: '../filedir' in Nuxt DevtoolsEPSS 1.2%CVE-2019-17324—ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters. This cEPSS 1.2%CVE-2020-36321MEDIUMDirectory traversal in development mode handler in Vaadin 14 and 15-17EPSS 1.2%CVE-2024-42469CRITICALCometVisu Backend for openHAB affected by RCE through path traversalEPSS 1.2%CVE-2023-34865CRITICALDirectory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature.EPSS 1.2%CVE-2024-41799HIGHtgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned usersEPSS 1.2%CVE-2021-32981HIGHAVEVA System Platform Path TraversalEPSS 1.2%CVE-2023-24188CRITICALureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to bEPSS 1.2%CVE-2023-43648MEDIUMbaserCMS Directory Traversal vulnerability in Form submission data management FeatureEPSS 1.2%CVE-2025-9566HIGHPodman: podman kube play command may overwrite host filesEPSS 1.2%CVE-2023-3172MEDIUMPath Traversal in froxlor/froxlorEPSS 1.2%