Weaknesses of type CWE-23

509 results

Traversal de diretório via construção insegura de caminhos

A aplicação usa entrada do usuário para montar um caminho de arquivo dentro de um diretório restrito, mas não neutraliza sequências como '..' que permitem navegar para fora desse limite. Um atacante consegue ler ou manipular arquivos fora da área permitida ao injetar '../' na entrada.

Example

Um sistema de download permite acesso a arquivos dentro de '/uploads/' passando o nome via parâmetro. Se o código faz `abrir('/uploads/' + nome_arquivo)` sem validar, um atacante passa `../../../etc/passwd` e consegue ler arquivos do sistema.

How to mitigate

Valide e normalize caminhos usando funções de sistema (ex: `realpath()` em PHP/Linux, `Path.GetFullPath()` em .NET), rejeitando qualquer caminho que escape do diretório raiz permitido. Alternativa: use uma lista branca de nomes de arquivo ou mapeie entrada para IDs internos, nunca concatene entrada diretamente em caminhos.

CVE-2026-42085MEDIUMOpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenamesEPSS 0.4%CVE-2025-59835HIGHLangBot has a cross-directory file upload vulnerability, which could lead to system takeoverEPSS 0.4%CVE-2026-48569HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.4%CVE-2026-72677HIGHRelative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other ResourcesEPSS 0.4%CVE-2026-65810HIGH.NET Framework Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2024-48892MEDIUMA relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an auEPSS 0.4%CVE-2024-37138MEDIUMDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerabiliEPSS 0.4%CVE-2025-64757LOWAstro Development Server is Vulnerable to Arbitrary Local File ReadEPSS 0.4%CVE-2024-8510MEDIUMN-central Path TraversalEPSS 0.4%CVE-2026-15913HIGHPath Traversal in Fortra's GoAnywhere MFT EndpointEPSS 0.4%CVE-2026-25121HIGHapko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside baseEPSS 0.4%CVE-2026-62843MEDIUMFile Browser: Archive builder turns backslash filenames into path traversal (zip-slip)EPSS 0.4%CVE-2026-20081MEDIUMCisco Unity Connection Arbitrary File Download VulnerabilityEPSS 0.4%CVE-2026-20078MEDIUMCisco Unity Connection Arbitrary File Download VulnerabilityEPSS 0.4%CVE-2025-24350HIGHA vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privilegeEPSS 0.4%CVE-2025-55202LOWOpencast has a partial path traversal vulnerability in UI configEPSS 0.4%CVE-2026-8209MEDIUMGibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application EPSS 0.4%CVE-2025-10249MEDIUMSlider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File ReadEPSS 0.4%CVE-2026-2818HIGHZip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)EPSS 0.4%CVE-2021-22281MEDIUMZip Slip Vulnerability in B&R Automation Studio Project ImportEPSS 0.4%