Weaknesses of type CWE-22

5,862 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2026-52610CRITICALAn arbitrary file write/directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to create or overwrite files anyEPSS 1.1%CVE-2026-17614MEDIUMWildfly-core: path traversal on wildfly domain controllerEPSS 1.1%CVE-2019-25258HIGHLogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal VulnerabilitiesEPSS 1.1%CVE-2026-19091HIGHGeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revisionEPSS 1.1%CVE-2022-3389HIGHPath Traversal in ikus060/rdiffwebEPSS 1.1%CVE-2022-20726MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 1.1%CVE-2018-19945—Improper Limitation of a Pathname to a Restricted Directory in QTSEPSS 1.1%CVE-2026-77621CRITICALVector: Arbitrary file write in the file sink via templated path (path traversal).EPSS 1.1%CVE-2022-42706MEDIUMAn issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetCoEPSS 1.1%CVE-2024-10816HIGHLUNA RADIO PLAYER <= 6.24.01.24 - Unauthenticated Arbitrary File ReadEPSS 1.1%CVE-2025-66645HIGHNiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File ReadingEPSS 1.1%CVE-2023-2435HIGHBlog-in-Blog <= 2.0.0 - Authenticated (Editor+) Local File Inclusion via ShortcodeEPSS 1.1%CVE-2025-1282HIGHCar Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and ReadEPSS 1.1%CVE-2024-28073HIGHSolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability EPSS 1.1%CVE-2023-1478CRITICALHummingbird < 3.4.2 - Unauthenticated Path Traversal EPSS 1.1%CVE-2026-58372HIGHSeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body KeysEPSS 1.1%CVE-2023-47279HIGHDelta Electronics InfraSuite Device Master Path TraversalEPSS 1.1%CVE-2026-26396HIGHOpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspaceEPSS 1.1%CVE-2024-41887MEDIUMArbitrary File OverwriteEPSS 1.1%CVE-2026-66050HIGHNitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer ServerEPSS 1.1%