Weaknesses of type CWE-23

509 results

Traversal de diretório via construção insegura de caminhos

A aplicação usa entrada do usuário para montar um caminho de arquivo dentro de um diretório restrito, mas não neutraliza sequências como '..' que permitem navegar para fora desse limite. Um atacante consegue ler ou manipular arquivos fora da área permitida ao injetar '../' na entrada.

Example

Um sistema de download permite acesso a arquivos dentro de '/uploads/' passando o nome via parâmetro. Se o código faz `abrir('/uploads/' + nome_arquivo)` sem validar, um atacante passa `../../../etc/passwd` e consegue ler arquivos do sistema.

How to mitigate

Valide e normalize caminhos usando funções de sistema (ex: `realpath()` em PHP/Linux, `Path.GetFullPath()` em .NET), rejeitando qualquer caminho que escape do diretório raiz permitido. Alternativa: use uma lista branca de nomes de arquivo ou mapeie entrada para IDs internos, nunca concatene entrada diretamente em caminhos.

CVE-2026-72948MEDIUMWindows DNS Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2021-22281MEDIUMZip Slip Vulnerability in B&R Automation Studio Project ImportEPSS 0.4%CVE-2024-12642HIGHChunghwa Telecom TenderDocTransfer - Arbitrary File WriteEPSS 0.4%CVE-2026-50454HIGHWindows User Interface Core Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-43016MEDIUMIn JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug sessionEPSS 0.4%CVE-2024-6985MEDIUMPath Traversal in api open_personality_folder in parisneo/lollms-webuiEPSS 0.4%CVE-2019-0074MEDIUMJunos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.EPSS 0.4%CVE-2024-22226LOW Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker couldEPSS 0.4%CVE-2026-15415MEDIUMPath traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-serverEPSS 0.4%CVE-2026-10073HIGHInterinfo｜DreamMaker - Arbitrary File ReadEPSS 0.4%CVE-2026-10074MEDIUMInterinfo｜DreamMaker - Arbitrary File ReadEPSS 0.3%CVE-2022-42470HIGHA relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allEPSS 0.3%CVE-2016-20023MEDIUMIn CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file wEPSS 0.3%CVE-2026-29201HIGHInsufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relaEPSS 0.3%CVE-2025-40605MEDIUMA Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injEPSS 0.3%CVE-2025-25048MEDIUMIBM Jazz Foundation path traversalEPSS 0.3%CVE-2026-79728MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path TravEPSS 0.3%CVE-2024-7058MEDIUMRelative Path Traversal in parisneo/lollms-webuiEPSS 0.3%CVE-2025-66386MEDIUMapp/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.EPSS 0.3%CVE-2024-12645MEDIUMChunghwa Telecom topm-client - Arbitrary File ReadEPSS 0.3%