Weaknesses of type CWE-24

128 results

Travessia de Diretórios via Sequências de Escape

É quando uma aplicação não valida adequadamente caminhos de arquivo fornecidos pelo usuário, permitindo que sequências como '../' sejam usadas para acessar diretórios fora do escopo pretendido. Um atacante consegue ler, modificar ou deletar arquivos sensíveis do sistema usando apenas strings de navegação de diretórios.

Example

Uma aplicação web recebe uma requisição GET como /download?file=../../../etc/passwd sem validação. O servidor processa literalmente '../' e retorna arquivos do sistema operacional, expondo credenciais ou configurações críticas.

How to mitigate

Valide e normalize todos os caminhos de arquivo antes de processá-los (use função de canonização nativa da linguagem), mantenha arquivos sensíveis fora da raiz web acessível, e implemente listas de permissão (whitelist) de nomes de arquivo permitidos. Nunca confie em entrada do usuário para construir caminhos de arquivo.

CVE-2024-37403MEDIUMIvanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to properly sanitize fileEPSS 0.5%CVE-2026-73573LOWIn Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality dEPSS 0.5%CVE-2026-66903MEDIUMApache OFBiz: Authenticated Path Traversal in Catalog Image ManagementEPSS 0.4%CVE-2026-46687HIGHEmlog Local File Inclusion (LFI)EPSS 0.4%CVE-2025-57563MEDIUMA path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files.EPSS 0.4%CVE-2026-44942MEDIUMlibzypp .repo files can have an optional path which can lead to path traversal attacksEPSS 0.4%CVE-2026-49103CRITICALWebmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxeEPSS 0.4%CVE-2022-1743MEDIUM2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24EPSS 0.4%CVE-2026-33431MEDIUMRoxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version ViewerEPSS 0.4%CVE-2026-66140HIGHExim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because argumentsEPSS 0.4%CVE-2026-76353MEDIUMPath Traversal through Knowledge Bundle Replication in Splunk EnterpriseEPSS 0.4%CVE-2026-92533HIGHPath Traversal in BugTracker.NETEPSS 0.4%CVE-2025-56760MEDIUMWhen Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path travEPSS 0.4%CVE-2026-40318HIGHSiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`EPSS 0.3%CVE-2025-68430MEDIUMCVAT vulnerable to directory traversal via mounted share listingEPSS 0.3%CVE-2026-21436MEDIUMeopkg has Path Traversal: '../filedir' vulnerabilityEPSS 0.3%CVE-2025-13199MEDIUMcode-projects Email Logging Interface signup.cpp path traversalEPSS 0.3%CVE-2025-61188MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files witEPSS 0.3%CVE-2025-61189MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerabilitEPSS 0.3%CVE-2023-20166MEDIUMCisco Identity Services Engine Path Traversal VulnerabilitiesEPSS 0.2%