Weaknesses of type CWE-23

509 results

Traversal de diretório via construção insegura de caminhos

A aplicação usa entrada do usuário para montar um caminho de arquivo dentro de um diretório restrito, mas não neutraliza sequências como '..' que permitem navegar para fora desse limite. Um atacante consegue ler ou manipular arquivos fora da área permitida ao injetar '../' na entrada.

Example

Um sistema de download permite acesso a arquivos dentro de '/uploads/' passando o nome via parâmetro. Se o código faz `abrir('/uploads/' + nome_arquivo)` sem validar, um atacante passa `../../../etc/passwd` e consegue ler arquivos do sistema.

How to mitigate

Valide e normalize caminhos usando funções de sistema (ex: `realpath()` em PHP/Linux, `Path.GetFullPath()` em .NET), rejeitando qualquer caminho que escape do diretório raiz permitido. Alternativa: use uma lista branca de nomes de arquivo ou mapeie entrada para IDs internos, nunca concatene entrada diretamente em caminhos.

CVE-2026-47680MEDIUMSource controller: Improper path handling allows traversalEPSS 0.5%CVE-2024-12019HIGHArbitrary File Read via Document APIEPSS 0.5%CVE-2024-9405MEDIUMAn incorrect limitation of a path to a restricted directory (path traversal) has been detected in Pluck CMS, affecting version 4.7.18. An unEPSS 0.5%CVE-2025-2961MEDIUMopensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversalEPSS 0.5%CVE-2025-52922HIGHInnoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated attacker with access to the admin panel coEPSS 0.5%CVE-2026-34026HIGHPath traversal in Wertheim SafeController Software allows authenticated users to download arbitrary filesEPSS 0.5%CVE-2025-59336MEDIUMRelative Path Traversal in LuanoxEPSS 0.5%CVE-2026-56794MEDIUMDell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attackeEPSS 0.5%CVE-2025-13771HIGHUniong｜WebITR - Arbitrary File ReadEPSS 0.5%CVE-2026-50024MEDIUMGitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git serverEPSS 0.5%CVE-2025-51052MEDIUMA path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting EPSS 0.4%CVE-2023-23379HIGHMicrosoft Defender for IoT Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-29189MEDIUMHTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)EPSS 0.4%CVE-2025-41268HIGHNozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in versionEPSS 0.4%CVE-2026-44948MEDIUMPath Traversal in Rancher Fleet ImageScan GitRepo Path HandlerEPSS 0.4%CVE-2026-58522MEDIUMMicrosoft Edge for Android Information Disclosure VulnerabilityEPSS 0.4%CVE-2025-41271HIGHNozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.EPSS 0.4%CVE-2026-27117MEDIUMbit7z has a path traversal vulnerabilityEPSS 0.4%CVE-2025-58467LOWQsync CentralEPSS 0.4%CVE-2025-25130HIGHWordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerabilityEPSS 0.4%