Weaknesses of type CWE-35

193 results

Bypass de restrição de diretório com sequências de caminho duplicadas

O software tenta restringir o acesso a um diretório específico, mas falha em neutralizar sequências como '.../...//' (barras e pontos duplicados) que conseguem 'escapar' para fora do diretório permitido. Um atacante fornece uma entrada malformada que, depois de processada, aponta para arquivos fora da zona de segurança pretendida.

Example

Um sistema de galeria de fotos só deveria servir imagens de '/uploads/'. Um usuário malicioso solicita '/uploads/.../...//../../../etc/passwd' esperando que o parser de caminhos normalize incorretamente e acesse um arquivo sensível fora da restrição.

How to mitigate

Valide e normalize completamente o caminho fornecido ANTES de qualquer verificação (use funções nativas como `realpath()` em PHP ou `Path.resolve()` em Node.js), depois confirme que o resultado está dentro do diretório permitido. Rejeite entrada com sequências suspeitas ('..', '//', '...') logo na entrada.

CVE-2025-49296HIGHWordPress GrandPrix theme <= 1.6 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2024-52447HIGHWordPress Contact Page With Google Map plugin <= 1.6.1 - Arbitrary File Deletion vulnerabilityEPSS 0.6%CVE-2026-69109HIGHA vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path EPSS 0.6%CVE-2025-39467HIGHWordPress Wanderland theme <= 1.7.1 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2025-52810HIGHWordPress Katerio - Magazine theme <= 1.5.1 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2026-118633CRITICALA path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) afterEPSS 0.6%CVE-2025-52811HIGHWordPress Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2024-41972MEDIUMWAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple DevicesEPSS 0.6%CVE-2025-30515CRITICALCyberData 011209 SIP Emergency Intercom Path TraversalEPSS 0.6%CVE-2024-56213MEDIUMWordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerabilityEPSS 0.6%CVE-2025-26876MEDIUMWordPress Search with Typesense Plugin <= 2.0.8 - Path Traversal vulnerabilityEPSS 0.6%CVE-2025-30834HIGHWordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerabilityEPSS 0.6%CVE-2026-6074CRITICALPath traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)EPSS 0.6%CVE-2024-54216HIGHWordPress ARForms plugin < 7.0.2 - Path Traversal vulnerabilityEPSS 0.6%CVE-2024-49249HIGHWordPress SMSA Shipping plugin <= 2.3 - Arbitrary File Deletion vulnerabilityEPSS 0.5%CVE-2024-52390MEDIUMWordPress CYAN Backup plugin <= 2.5.3 - Arbitrary File Download vulnerabilityEPSS 0.5%CVE-2025-47649HIGHWordPress Open Close WooCommerce Store plugin <= 4.9.9 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2024-49258MEDIUMWordPress Limb Gallery plugin <= 1.5.7 - Arbitrary File Download vulnerabilityEPSS 0.5%CVE-2025-49451HIGHWordPress Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery plugin <= 1.0.13 - Directory Traversal VulnerabilityEPSS 0.5%CVE-2024-51582HIGHWordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerabilityEPSS 0.5%