Weaknesses of type CWE-23

509 results

Traversal de diretório via construção insegura de caminhos

A aplicação usa entrada do usuário para montar um caminho de arquivo dentro de um diretório restrito, mas não neutraliza sequências como '..' que permitem navegar para fora desse limite. Um atacante consegue ler ou manipular arquivos fora da área permitida ao injetar '../' na entrada.

Example

Um sistema de download permite acesso a arquivos dentro de '/uploads/' passando o nome via parâmetro. Se o código faz `abrir('/uploads/' + nome_arquivo)` sem validar, um atacante passa `../../../etc/passwd` e consegue ler arquivos do sistema.

How to mitigate

Valide e normalize caminhos usando funções de sistema (ex: `realpath()` em PHP/Linux, `Path.GetFullPath()` em .NET), rejeitando qualquer caminho que escape do diretório raiz permitido. Alternativa: use uma lista branca de nomes de arquivo ou mapeie entrada para IDs internos, nunca concatene entrada diretamente em caminhos.

CVE-2024-8551CRITICALPath Traversal in modelscope/agentscopeEPSS 1.0%CVE-2023-0511CRITICALAM Java Policy Agent path traversalEPSS 1.0%CVE-2023-0339CRITICALAM Web Policy Agent path traversalEPSS 1.0%CVE-2024-7693HIGHTeam Johnlong software Raiden MAILD Remote Management System - Arbitrary File Reading through Path TraversalEPSS 1.0%CVE-2025-48817HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-43399HIGHMobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library FilesEPSS 1.0%CVE-2026-56196HIGHWindows Admin Center (WAC) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-20059CRITICALPingAM Java Policy Agent path traversalEPSS 1.0%CVE-2024-20449HIGHCisco Nexus Dashboard Fabric Controller Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-1045LOWMuYuCMS filesdel.html path traversalEPSS 0.9%CVE-2026-50663HIGHGame: Age of Empires II: Definitive Edition Remote Code Execution VulnerabilityEPSS 0.9%CVE-2021-28798HIGHRelative Path Traversal Vulnerability in QTS and QuTS heroEPSS 0.9%CVE-2023-37288MEDIUMSmartBPM.NET - Path TraversalEPSS 0.9%CVE-2022-21177—There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 verEPSS 0.9%CVE-2024-2318MEDIUMZKTeco ZKBio Media Service Port 9999 download path traversalEPSS 0.9%CVE-2022-41335HIGHA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, ForEPSS 0.9%CVE-2021-29488MEDIUMCreation of files outside the Download Folder through malicious PAR2 filesEPSS 0.9%CVE-2021-32825LOWZipSlip vulnerability in bblfshdEPSS 0.9%CVE-2023-3941CRITICALMultiple arbitrary file writes in ZkTeco-based OEM devicesEPSS 0.9%CVE-2025-59682LOWAn issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract() function, uEPSS 0.9%