Weaknesses of type CWE-24

113 results

Travessia de Diretórios via Sequências de Escape

É quando uma aplicação não valida adequadamente caminhos de arquivo fornecidos pelo usuário, permitindo que sequências como '../' sejam usadas para acessar diretórios fora do escopo pretendido. Um atacante consegue ler, modificar ou deletar arquivos sensíveis do sistema usando apenas strings de navegação de diretórios.

Example

Uma aplicação web recebe uma requisição GET como /download?file=../../../etc/passwd sem validação. O servidor processa literalmente '../' e retorna arquivos do sistema operacional, expondo credenciais ou configurações críticas.

How to mitigate

Valide e normalize todos os caminhos de arquivo antes de processá-los (use função de canonização nativa da linguagem), mantenha arquivos sensíveis fora da raiz web acessível, e implemente listas de permissão (whitelist) de nomes de arquivo permitidos. Nunca confie em entrada do usuário para construir caminhos de arquivo.

CVE-2026-39813CRITICALA path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attackEPSS 23.1%CVE-2022-38129HIGHA path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor MEPSS 18.7%CVE-2025-60344HIGHA path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate inpuEPSS 10.3%CVE-2021-33036—Apache Hadoop Privilege escalation vulnerabilityEPSS 3.6%CVE-2023-1800HIGHsjqzhang go-fastdfs File Upload uploa upload path traversalEPSS 3.5%CVE-2024-6746MEDIUMNaiboWang EasySpider HTTP GET Request server.js path traversalEPSS 3.3%CVE-2025-54769HIGHKL-001-2025-016: Xorux LPAR2RRD File Upload Directory TraversalEPSS 3.0%CVE-2020-9708MEDIUMGHSL-2020-133: Insufficient validation of user input in resolveRepositoryPath functionEPSS 2.9%CVE-2025-59342MEDIUMesm.sh writes arbitrary files via path traversal in `X-Zone-Id` headerEPSS 2.8%CVE-2024-43035MEDIUMFonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint.EPSS 2.4%CVE-2025-47423MEDIUMPersonal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in theEPSS 2.0%CVE-2025-27920HIGHOutput Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences inEPSS 1.8%KEVCVE-2024-1459MEDIUMUndertow: directory traversal vulnerabilityEPSS 1.7%CVE-2025-59049HIGHMockoon has a Path Traversal and LFI in the static file serving endpointEPSS 1.7%CVE-2022-20656MEDIUMCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 1.6%CVE-2021-29466MEDIUMPath Traversal at Discord-Recon .recon Command PathEPSS 1.6%CVE-2024-53636MEDIUMAn arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackeEPSS 1.4%CVE-2021-21706MEDIUMZipArchive::extractTo may extract outside of destination dirEPSS 1.4%CVE-2020-8567MEDIUMKubernetes Secrets Store CSI Driver plugin directory traversalsEPSS 1.4%CVE-2025-43919MEDIUMGNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at EPSS 1.3%