Weaknesses of type CWE-24

119 results

Travessia de Diretórios via Sequências de Escape

É quando uma aplicação não valida adequadamente caminhos de arquivo fornecidos pelo usuário, permitindo que sequências como '../' sejam usadas para acessar diretórios fora do escopo pretendido. Um atacante consegue ler, modificar ou deletar arquivos sensíveis do sistema usando apenas strings de navegação de diretórios.

Example

Uma aplicação web recebe uma requisição GET como /download?file=../../../etc/passwd sem validação. O servidor processa literalmente '../' e retorna arquivos do sistema operacional, expondo credenciais ou configurações críticas.

How to mitigate

Valide e normalize todos os caminhos de arquivo antes de processá-los (use função de canonização nativa da linguagem), mantenha arquivos sensíveis fora da raiz web acessível, e implemente listas de permissão (whitelist) de nomes de arquivo permitidos. Nunca confie em entrada do usuário para construir caminhos de arquivo.

CVE-2026-33431MEDIUMRoxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version ViewerEPSS 0.4%CVE-2022-1743MEDIUM2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24EPSS 0.4%CVE-2025-56760MEDIUMWhen Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path travEPSS 0.3%CVE-2026-73573LOWIn Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality dEPSS 0.3%CVE-2026-21436MEDIUMeopkg has Path Traversal: '../filedir' vulnerabilityEPSS 0.3%CVE-2025-68430MEDIUMCVAT vulnerable to directory traversal via mounted share listingEPSS 0.3%CVE-2026-40318HIGHSiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`EPSS 0.3%CVE-2026-76353MEDIUMPath Traversal through Knowledge Bundle Replication in Splunk EnterpriseEPSS 0.3%CVE-2025-61188MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files witEPSS 0.3%CVE-2025-61189MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerabilitEPSS 0.3%CVE-2026-66140HIGHExim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because argumentsEPSS 0.3%CVE-2025-13199MEDIUMcode-projects Email Logging Interface signup.cpp path traversalEPSS 0.3%CVE-2023-20166MEDIUMCisco Identity Services Engine Path Traversal VulnerabilitiesEPSS 0.2%CVE-2026-22810HIGHJoplin: Path traversal in OneNote importer allows overwriting arbitrary filesEPSS 0.2%CVE-2026-41082HIGHIn OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.EPSS 0.2%CVE-2025-46646MEDIUMIn Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of EPSS 0.2%CVE-2025-26427MEDIUMIn multiple locations, there is a possible Android/data access due to a path traversal error. This could lead to local escalation of privileEPSS 0.1%CVE-2025-70819MEDIUMZettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../EPSS 0.1%CVE-2026-28538MEDIUMPath traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availabiEPSS 0.1%