Weaknesses of type CWE-23

509 results

Traversal de diretório via construção insegura de caminhos

A aplicação usa entrada do usuário para montar um caminho de arquivo dentro de um diretório restrito, mas não neutraliza sequências como '..' que permitem navegar para fora desse limite. Um atacante consegue ler ou manipular arquivos fora da área permitida ao injetar '../' na entrada.

Example

Um sistema de download permite acesso a arquivos dentro de '/uploads/' passando o nome via parâmetro. Se o código faz `abrir('/uploads/' + nome_arquivo)` sem validar, um atacante passa `../../../etc/passwd` e consegue ler arquivos do sistema.

How to mitigate

Valide e normalize caminhos usando funções de sistema (ex: `realpath()` em PHP/Linux, `Path.GetFullPath()` em .NET), rejeitando qualquer caminho que escape do diretório raiz permitido. Alternativa: use uma lista branca de nomes de arquivo ou mapeie entrada para IDs internos, nunca concatene entrada diretamente em caminhos.

CVE-2025-58760HIGHTautulli vulnerable to Unauthenticated Path Traversal in `/image` endpointEPSS 0.6%CVE-2025-0822MEDIUMBit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID ParameterEPSS 0.6%CVE-2023-3701CRITICALRelative path traversal in Aqua eSolutionsEPSS 0.6%CVE-2023-42456LOWsudo-rs Session File Relative Path Traversal vulnerabilityEPSS 0.6%CVE-2026-63509CRITICALMicrosoft Fabric Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-32017HIGHUmbraco has a Management API Vulnerability to Path Traversal With Authenticated UsersEPSS 0.6%CVE-2022-34836MEDIUMABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlEPSS 0.6%CVE-2025-58456HIGHAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.6%CVE-2025-54317HIGHAn issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creatEPSS 0.6%CVE-2025-3365CRITICALRelative Path Traversal in OnlineSuiteEPSS 0.6%CVE-2026-76424HIGHCisco ISE Arbitrary File Access VulnerabilityEPSS 0.6%CVE-2025-12097HIGHRelative Path Traversal Vulnerability in NI System Web ServerEPSS 0.6%CVE-2025-58429HIGHAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.6%CVE-2025-58078HIGHAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.6%CVE-2025-15015HIGHRagic｜Enterprise Cloud Database - Arbitrary File ReadEPSS 0.6%CVE-2022-42892MEDIUMA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service usiEPSS 0.6%CVE-2024-3122MEDIUMCHANGING Mobile One Time Password - Arbitrary File ReadingEPSS 0.6%CVE-2025-67366HIGH@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of filesystem-mcp containsEPSS 0.6%CVE-2023-40714CRITICALA relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to esEPSS 0.6%CVE-2025-58752LOWVite's `server.fs` settings were not applied to HTML filesEPSS 0.6%