Weaknesses of type CWE-23

509 results

Traversal de diretório via construção insegura de caminhos

A aplicação usa entrada do usuário para montar um caminho de arquivo dentro de um diretório restrito, mas não neutraliza sequências como '..' que permitem navegar para fora desse limite. Um atacante consegue ler ou manipular arquivos fora da área permitida ao injetar '../' na entrada.

Example

Um sistema de download permite acesso a arquivos dentro de '/uploads/' passando o nome via parâmetro. Se o código faz `abrir('/uploads/' + nome_arquivo)` sem validar, um atacante passa `../../../etc/passwd` e consegue ler arquivos do sistema.

How to mitigate

Valide e normalize caminhos usando funções de sistema (ex: `realpath()` em PHP/Linux, `Path.GetFullPath()` em .NET), rejeitando qualquer caminho que escape do diretório raiz permitido. Alternativa: use uma lista branca de nomes de arquivo ou mapeie entrada para IDs internos, nunca concatene entrada diretamente em caminhos.

CVE-2023-3512HIGHRelative path traversal in Setelsa Security ConacWin CBEPSS 0.6%CVE-2025-9639HIGHAi3｜QbiCRMGateway - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2023-23778MEDIUMA relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions mEPSS 0.6%CVE-2025-1584MEDIUMopensolon Solon StaticMappings.java path traversalEPSS 0.6%CVE-2024-45731HIGHPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate diskEPSS 0.6%CVE-2026-81849HIGHPath traversal in the aws:downloadContent plugin in amazon-ssm-agentEPSS 0.6%CVE-2025-31493MEDIUMPath traversal of collection names during file system lookupEPSS 0.6%CVE-2026-8073HIGHKirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIPEPSS 0.6%CVE-2025-30207LOWKirby vulnerable to path traversal in the router for PHP's built-in serverEPSS 0.6%CVE-2025-2056HIGHWP Ghost <= 5.4.01 - Unauthenticated Limited File ReadEPSS 0.6%CVE-2023-23784MEDIUMA relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versionsEPSS 0.6%CVE-2026-50426MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-50453HIGHWordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-6433HIGHLocal File Inclusion in stitionai/devikaEPSS 0.6%CVE-2024-34712MEDIUMOceanic allows unsanitized user input to lead to path traversal in URLsEPSS 0.6%CVE-2026-8100HIGHImpact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific condEPSS 0.5%CVE-2025-46433MEDIUMIn JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possibleEPSS 0.5%CVE-2025-7146HIGHJhenggao iPublish System - Arbitrary File Reading through Path TraversalEPSS 0.5%CVE-2026-78254HIGHApache Ant: Path traversal in ftp and scp tasks allows arbitrary file writeEPSS 0.5%CVE-2026-57871HIGHRelative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. EPSS 0.5%