Weaknesses of type CWE-35

184 results

Bypass de restrição de diretório com sequências de caminho duplicadas

O software tenta restringir o acesso a um diretório específico, mas falha em neutralizar sequências como '.../...//' (barras e pontos duplicados) que conseguem 'escapar' para fora do diretório permitido. Um atacante fornece uma entrada malformada que, depois de processada, aponta para arquivos fora da zona de segurança pretendida.

Example

Um sistema de galeria de fotos só deveria servir imagens de '/uploads/'. Um usuário malicioso solicita '/uploads/.../...//../../../etc/passwd' esperando que o parser de caminhos normalize incorretamente e acesse um arquivo sensível fora da restrição.

How to mitigate

Valide e normalize completamente o caminho fornecido ANTES de qualquer verificação (use funções nativas como `realpath()` em PHP ou `Path.resolve()` em Node.js), depois confirme que o resultado está dentro do diretório permitido. Rejeite entrada com sequências suspeitas ('..', '//', '...') logo na entrada.

CVE-2025-26940MEDIUMWordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerabilityEPSS 0.4%CVE-2025-46441MEDIUMWordPress Section Widget plugin <= 3.3.1 - Path Traversal vulnerabilityEPSS 0.4%CVE-2026-28157HIGHWordPress Do Lasso plugin <= 358 - Path Traversal vulnerabilityEPSS 0.4%CVE-2026-25705HIGHRancher Extensions have arbitrary file access via path traversalEPSS 0.4%CVE-2026-42274HIGHHeimdall: Authorization bypass via path normalization mismatchEPSS 0.4%CVE-2025-28973MEDIUMWordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal VulnerabilityEPSS 0.3%CVE-2025-67914HIGHWordPress VidMov theme <= 2.3.8 - Path Traversal vulnerabilityEPSS 0.3%CVE-2025-48081MEDIUMWordPress Printeers Print & Ship plugin <= 1.17.0 - Directory Traversal vulnerabilityEPSS 0.3%CVE-2026-49112HIGHWordPress Shared Files plugin <= 1.7.64 - Path Traversal vulnerabilityEPSS 0.3%CVE-2025-22288MEDIUMWordPress Smush Image Compression and Optimization plugin <= 3.17.0 - Directory Traversal vulnerabilityEPSS 0.3%CVE-2025-30966MEDIUMWordPress WPJobBoard plugin < 5.11.1 - Path Traversal vulnerabilityEPSS 0.3%CVE-2026-21092HIGHPath traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.EPSS 0.3%CVE-2025-4956MEDIUMWordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal VulnerabilityEPSS 0.3%CVE-2023-7300HIGHHuawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to EPSS 0.3%CVE-2026-85310MEDIUMWordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerabilityEPSS 0.3%CVE-2024-7608MEDIUMAn authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.EPSS 0.3%CVE-2025-46256MEDIUMWordPress Advanced Database Cleaner PRO Plugin <= 3.2.10 - Limited .txt Path Traversal vulnerabilityEPSS 0.3%CVE-2022-36928MEDIUMPath Traversal in Zoom for Android ClientsEPSS 0.3%CVE-2023-7263HIGHSome Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorEPSS 0.3%CVE-2025-0858MEDIUMCertain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized UserEPSS 0.3%