Weaknesses of type CWE-23

509 results

Traversal de diretório via construção insegura de caminhos

A aplicação usa entrada do usuário para montar um caminho de arquivo dentro de um diretório restrito, mas não neutraliza sequências como '..' que permitem navegar para fora desse limite. Um atacante consegue ler ou manipular arquivos fora da área permitida ao injetar '../' na entrada.

Example

Um sistema de download permite acesso a arquivos dentro de '/uploads/' passando o nome via parâmetro. Se o código faz `abrir('/uploads/' + nome_arquivo)` sem validar, um atacante passa `../../../etc/passwd` e consegue ler arquivos do sistema.

How to mitigate

Valide e normalize caminhos usando funções de sistema (ex: `realpath()` em PHP/Linux, `Path.GetFullPath()` em .NET), rejeitando qualquer caminho que escape do diretório raiz permitido. Alternativa: use uma lista branca de nomes de arquivo ou mapeie entrada para IDs internos, nunca concatene entrada diretamente em caminhos.

CVE-2025-48977HIGHApache Ignite: REST HTTP arbitrary file read vulnerabilityEPSS 0.5%CVE-2026-27625HIGHStirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP ExtractionEPSS 0.5%CVE-2026-29778HIGHpyLoad: Arbitrary File Write via Path Traversal in edit_package()EPSS 0.5%CVE-2023-30630HIGHDmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode viEPSS 0.5%CVE-2025-9570MEDIUMSunnet｜eHRD CTMS - Arbitrary File Reading through Path TraversalEPSS 0.5%CVE-2026-8326CRITICALRemote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCEEPSS 0.5%CVE-2026-31927MEDIUMAnviz CX7 Firmware Relative Path TraversalEPSS 0.5%CVE-2025-23360HIGHNVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successfuEPSS 0.5%CVE-2023-0745MEDIUMArbitrary File Write in High Availability Backup UploadEPSS 0.5%CVE-2026-30345HIGHA zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside theEPSS 0.5%CVE-2025-53829HIGHownCloud 10 is vulnerable to Relative Path TraversalEPSS 0.5%CVE-2026-23890MEDIUMpnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.binEPSS 0.5%CVE-2025-59776MEDIUMAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.5%CVE-2025-60023MEDIUMAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.5%CVE-2026-8361HIGHGladinet Triofox Path Traversal in WOSDefaultHttpModule.dllEPSS 0.5%CVE-2024-36362MEDIUMIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was posEPSS 0.5%CVE-2026-48126HIGHAlgernon: Host header path traversal in --domain mode reads files and runs Lua from parent dirEPSS 0.5%CVE-2024-2461MEDIUMIf exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessibleEPSS 0.5%CVE-2024-20310MEDIUMA vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unEPSS 0.5%CVE-2025-58464HIGHQuMagieEPSS 0.5%