Weaknesses of type CWE-22

5,865 results

Traversal de diretório (path traversal)

A aplicação recebe um caminho de arquivo fornecido pelo usuário e o usa para acessar arquivos sem validar adequadamente se o resultado fica dentro do diretório permitido. Um atacante injeta sequências como '../' ou '..' para "escapar" do diretório esperado e acessar arquivos sensíveis do sistema.

Example

Um site permite download de arquivos do diretório /uploads passando o nome via URL: download.php?file=documento.pdf. Um atacante envia file=../../etc/passwd e consegue ler arquivos fora de /uploads, porque o código não neutraliza a sequência '..'.

How to mitigate

Valide e canonicalize todo caminho fornecido pelo usuário antes de usá-lo: implemente uma whitelist de nomes permitidos, normalize caminhos para sua forma canônica, verifique se o resultado está dentro do diretório esperado, e use APIs de segurança da linguagem (ex: Path.normalize() + validação de prefix em Java, pathlib em Python).

CVE-2024-8352HIGHSocial Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File DownloadEPSS 1.0%CVE-2026-38993MEDIUMCockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackersEPSS 1.0%CVE-2024-0964HIGHLFI in GradioEPSS 1.0%CVE-2024-46649HIGHeNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.EPSS 1.0%CVE-2024-57784MEDIUMAn issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal.EPSS 1.0%CVE-2026-3689MEDIUMOpenClaw Canvas Path Traversal Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-47871HIGHVMware Avi Load Balancer Directory Traversal VulnerabilityEPSS 1.0%CVE-2017-20284HIGHCaucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig ServletEPSS 1.0%CVE-2025-21622HIGHClipBucket V5 Avatar URL Path Traversal to Arbitrary File DeleteEPSS 1.0%CVE-2023-39459HIGHTriangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation VulnerabilityEPSS 1.0%CVE-2022-46639HIGHA vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows attackers to execute a directory traversal.EPSS 1.0%CVE-2025-6065CRITICALImage Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File DeletionEPSS 1.0%CVE-2022-23620MEDIUMPath traversal in xwiki-platform-skin-skinxEPSS 1.0%CVE-2024-8104HIGHThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File DownloadEPSS 1.0%CVE-2024-7146HIGHJetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File InclusionEPSS 1.0%CVE-2024-7961HIGHRockwell Automation Path Traversal Vulnerability in Pavilion8®EPSS 1.0%CVE-2024-28993HIGHSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityEPSS 1.0%CVE-2024-5349HIGHLA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File InclusionEPSS 1.0%CVE-2025-65346CRITICALalexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows arEPSS 1.0%CVE-2026-5478HIGHEverest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' ParameterEPSS 1.0%