Weaknesses of type CWE-26

17 results

Travessia de Diretório

Fraqueza que permite um atacante acessar arquivos fora do diretório pretendido pela aplicação, usando sequências como '../' ou '..\' no caminho. O código não valida ou sanitiza a entrada do usuário antes de construir o caminho do arquivo, permitindo escapar da raiz configurada.

Example

Uma aplicação web recebe um parâmetro 'arquivo=relatorio.pdf' e o recupera de /var/www/uploads/. Se o atacante envia 'arquivo=../../etc/passwd', o código concatena o caminho sem validação e acaba acessando /etc/passwd, expondo dados sensíveis do sistema.

How to mitigate

Valide e canonicalize caminhos de arquivo, comparando-os com um diretório-raiz permitido; nunca concatene entrada do usuário diretamente em caminhos. Use APIs seguras de acesso a arquivos que restrinjam o escopo, e implemente listas de permissão de nomes de arquivo ou padrões aceitos.

CVE-2024-20345MEDIUMA vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct diEPSS 2.2%CVE-2021-34762HIGHCisco Firepower Management Center Software Authenticated Directory Traversal VulnerabilityEPSS 1.9%CVE-2021-42021—A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video DEPSS 1.7%CVE-2023-50255CRITICALZip Path Traversal in Deepin-CompressorEPSS 1.1%CVE-2024-29466HIGHDirectory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.EPSS 1.0%CVE-2023-25802HIGHRoxy-WI has Path Traversal vulnerabilityEPSS 1.0%CVE-2024-28064CRITICALKiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated filEPSS 0.9%CVE-2025-25295HIGHLabel Studio has a Path Traversal Vulnerability via image FieldEPSS 0.7%CVE-2024-31551HIGHDirectory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via cEPSS 0.7%CVE-2026-42196CRITICALdjango-s3file: Relative path traversalEPSS 0.6%CVE-2024-25466HIGHDirectory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbEPSS 0.5%CVE-2024-5865HIGHArbitrary File Reading in Centrify PASEPSS 0.5%CVE-2025-53908HIGHRomM vulnerable to Authenticated Path TraversalEPSS 0.5%CVE-2026-25575HIGHNavigaTUM has a Path Traversal Vulnerability in the propose_edits functionalityEPSS 0.4%CVE-2024-5866MEDIUMArbitrary Directory Listing in Centrify PASEPSS 0.4%CVE-2022-45133MEDIUMMahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured XEPSS 0.3%CVE-2026-46747MEDIUMA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize patEPSS 0.2%