Weaknesses of type CWE-22

6,633 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2026-57565MEDIUMReadest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)EPSS 1.0%CVE-2026-7311HIGHTinyPNG <= 3.6.13 - Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post MetaEPSS 1.0%CVE-2021-35968MEDIUMLearningdigital.com, Inc. Orca HCM - Path Traversal-2EPSS 1.0%CVE-2024-1961HIGHPath Traversal leading to Arbitrary File Write and RCE in vertaai/modeldbEPSS 1.0%CVE-2026-21440CRITICALAdonisJS Path Traversal in Multipart File HandlingEPSS 1.0%CVE-2023-22914HIGHA path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN EPSS 1.0%CVE-2025-1336MEDIUMCmsEasy image_admin.php deleteimg_action path traversalEPSS 1.0%CVE-2021-33725—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files orEPSS 1.0%CVE-2021-33724—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system contains an Arbitrary File DeletionEPSS 1.0%CVE-2026-88396HIGHApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes theEPSS 1.0%CVE-2024-9939HIGHWordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.phpEPSS 1.0%CVE-2017-20105MEDIUMSimplessus path traversalEPSS 1.0%CVE-2021-36288HIGHDell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticated users to read/writeEPSS 1.0%CVE-2023-23760MEDIUMPath traversal in GitHub Enterprise Server leading to remote code executionEPSS 1.0%CVE-2024-46898HIGHSHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability isEPSS 1.0%CVE-2023-53772HIGHMiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About PageEPSS 1.0%CVE-2026-25770CRITICALWazuh has Privilege Escalation to Root via Cluster Protocol File WriteEPSS 1.0%CVE-2020-2504MEDIUMAbsolute path traversal vulnerability in QESEPSS 1.0%CVE-2023-26045CRITICALNodeBB vulnerable to path traversal and code execution via prototype vulnerabilityEPSS 1.0%CVE-2025-6065CRITICALImage Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File DeletionEPSS 1.0%