Weaknesses of type CWE-23

509 results

Traversal de diretório via construção insegura de caminhos

A aplicação usa entrada do usuário para montar um caminho de arquivo dentro de um diretório restrito, mas não neutraliza sequências como '..' que permitem navegar para fora desse limite. Um atacante consegue ler ou manipular arquivos fora da área permitida ao injetar '../' na entrada.

Example

Um sistema de download permite acesso a arquivos dentro de '/uploads/' passando o nome via parâmetro. Se o código faz `abrir('/uploads/' + nome_arquivo)` sem validar, um atacante passa `../../../etc/passwd` e consegue ler arquivos do sistema.

How to mitigate

Valide e normalize caminhos usando funções de sistema (ex: `realpath()` em PHP/Linux, `Path.GetFullPath()` em .NET), rejeitando qualquer caminho que escape do diretório raiz permitido. Alternativa: use uma lista branca de nomes de arquivo ou mapeie entrada para IDs internos, nunca concatene entrada diretamente em caminhos.

CVE-2023-6722HIGHRelative Path Traversal in RepoxEPSS 0.8%CVE-2025-0390MEDIUMGuangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversalEPSS 0.8%CVE-2025-11898HIGHFlowring Technology｜Agentflow - Arbitrary File Reading through Path TraversalEPSS 0.8%CVE-2026-15802HIGHWP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX ActionEPSS 0.8%CVE-2024-0549HIGHRelative Path Traversal in mintplex-labs/anything-llmEPSS 0.8%CVE-2024-35186HIGHgix traversal outside working tree enables arbitrary code executionEPSS 0.8%CVE-2026-67367CRITICALA vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), EPSS 0.8%CVE-2022-30300MEDIUMA relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenEPSS 0.8%CVE-2026-70337HIGHMicrosoft PowerShell Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-1086MEDIUMSafetytest Cloud-Master Server static path traversalEPSS 0.8%CVE-2024-27770HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path TraversalEPSS 0.8%CVE-2026-47287MEDIUMVisual Studio Code Tampering VulnerabilityEPSS 0.8%CVE-2021-38399HIGHHoneywell Experion PKS and ACE Controllers Relative Path TraversalEPSS 0.8%CVE-2021-37196—A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 onlEPSS 0.8%CVE-2023-3940HIGHMultiple arbitrary file reads in ZkTeco-based OEM devicesEPSS 0.8%CVE-2025-7619HIGHWellChoose｜BatchSignCS - Arbitrary File Write through Path TraversalEPSS 0.8%CVE-2025-32137MEDIUMWordPress s2Member plugin <= 250419 - Local File Inclusion vulnerabilityEPSS 0.8%CVE-2024-47769HIGHIDURAR has a Path Traversal (unauthenticated user can read sensitive data)EPSS 0.8%CVE-2024-25944MEDIUMDell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially EPSS 0.8%CVE-2024-32005HIGHLocal File Inclusion in NiceGUI leaflet componentEPSS 0.8%