Weaknesses of type CWE-22

5,862 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2020-18330CRITICALAn issue was discovered in the default configuration of ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2EPSS 1.0%CVE-2023-42462HIGHFile deletion through document upload process in GLPIEPSS 1.0%CVE-2023-25345HIGHDirectory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the includeEPSS 1.0%CVE-2020-37041HIGHOpenCTI 3.3.1 - Directory TraversalEPSS 1.0%CVE-2025-0493CRITICALMultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File InclusionEPSS 1.0%CVE-2022-36081HIGHWikmd vulnerable to Local File Enumeration when accessing /listEPSS 1.0%CVE-2024-1303MEDIUMMultiple Vulnerabilities in Badger Meter's MonitoolEPSS 1.0%CVE-2023-49508MEDIUMDirectory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtaiEPSS 1.0%CVE-2024-48019MEDIUMApache Doris: allows admin users to read arbitrary files through the REST APIEPSS 1.0%CVE-2026-32060HIGHOpenClaw < 2026.2.14 - Path Traversal in apply_patch via Crafted PathsEPSS 1.0%CVE-2022-23609HIGHPath traveresal in iTunesRPC-RemasteredEPSS 1.0%CVE-2026-9843HIGHDatabase for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST ValueEPSS 1.0%CVE-2024-11123MEDIUM上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversalEPSS 1.0%CVE-2026-71932MEDIUMDrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFileEPSS 1.0%CVE-2021-43930MEDIUMElcomplus SmartPtt Path TraversalEPSS 1.0%CVE-2022-0072MEDIUMDirectory Traversal in OpenLiteSpeed Web ServerEPSS 1.0%CVE-2022-3060HIGHImproper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attackeEPSS 1.0%CVE-2026-78461HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2025-34181HIGHNetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCEEPSS 1.0%CVE-2026-25539CRITICALSiYuan has Arbitrary File Write via /api/file/copyFile leading to RCEEPSS 1.0%