Weaknesses of type CWE-22

6,632 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2026-30940HIGHbaserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCEEPSS 1.1%CVE-2018-10917MEDIUMpulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to lEPSS 1.1%CVE-2024-12152HIGHMIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File DownloadEPSS 1.1%CVE-2024-50508HIGHWordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Download vulnerabilityEPSS 1.1%CVE-2023-26969HIGHAtropim 1.5.26 is vulnerable to Directory Traversal.EPSS 1.1%CVE-2022-36081HIGHWikmd vulnerable to Local File Enumeration when accessing /listEPSS 1.1%CVE-2026-22871HIGHGuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCEEPSS 1.1%CVE-2021-3823HIGHPath traversal vulnerability in Bitdefender GravitZone Update Server in relay modeEPSS 1.1%CVE-2024-13982HIGHSPON IP Network Intercom System rj_get_token.php Arbitrary File ReadEPSS 1.1%CVE-2024-38824CRITICALCVE-2024-38824 salt advisoryEPSS 1.1%CVE-2022-47951MEDIUMAn issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.EPSS 1.1%CVE-2020-5720—MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has wriEPSS 1.1%CVE-2022-25848HIGHDirectory TraversalEPSS 1.1%CVE-2025-7640HIGHhiWeb Export Posts <= 0.9.0.0 - Cross-Site Request Forgery to Arbitrary File DeletionEPSS 1.1%CVE-2026-14372HIGHBit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' ParameterEPSS 1.1%CVE-2024-46376CRITICALBest House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/EPSS 1.1%CVE-2017-20145MEDIUMTecrail Responsive Filemanger path traversalEPSS 1.1%CVE-2024-0818CRITICALArbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6EPSS 1.1%CVE-2023-47890HIGHpyLoad 0.5.0 is vulnerable to Unrestricted File Upload.EPSS 1.1%CVE-2026-102229MEDIUMVisual Studio Code Information Disclosure VulnerabilityEPSS 1.1%