Weaknesses of type CWE-35

193 results

Bypass de restrição de diretório com sequências de caminho duplicadas

O software tenta restringir o acesso a um diretório específico, mas falha em neutralizar sequências como '.../...//' (barras e pontos duplicados) que conseguem 'escapar' para fora do diretório permitido. Um atacante fornece uma entrada malformada que, depois de processada, aponta para arquivos fora da zona de segurança pretendida.

Example

Um sistema de galeria de fotos só deveria servir imagens de '/uploads/'. Um usuário malicioso solicita '/uploads/.../...//../../../etc/passwd' esperando que o parser de caminhos normalize incorretamente e acesse um arquivo sensível fora da restrição.

How to mitigate

Valide e normalize completamente o caminho fornecido ANTES de qualquer verificação (use funções nativas como `realpath()` em PHP ou `Path.resolve()` em Node.js), depois confirme que o resultado está dentro do diretório permitido. Rejeite entrada com sequências suspeitas ('..', '//', '...') logo na entrada.

CVE-2026-105683LOWGhost: Path Traversal Vulnerability in Ghost ImageSize ServiceEPSS 0.3%CVE-2023-7300HIGHHuawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to EPSS 0.3%CVE-2025-4956MEDIUMWordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal VulnerabilityEPSS 0.3%CVE-2026-5703HIGHPath Traversal in Satel Iberia SenNet Datalogger Serie 200EPSS 0.3%CVE-2026-97244HIGHWordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerabilityEPSS 0.3%CVE-2025-53880HIGHsusemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversalEPSS 0.3%CVE-2024-7608MEDIUMAn authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.EPSS 0.3%CVE-2022-36928MEDIUMPath Traversal in Zoom for Android ClientsEPSS 0.3%CVE-2025-46256MEDIUMWordPress Advanced Database Cleaner PRO Plugin <= 3.2.10 - Limited .txt Path Traversal vulnerabilityEPSS 0.3%CVE-2023-7263HIGHSome Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorEPSS 0.3%CVE-2026-103290MEDIUMGhost 6.14.0 before 6.27.0 Path Traversal via ImageSizeEPSS 0.3%CVE-2025-0858MEDIUMCertain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized UserEPSS 0.3%CVE-2026-32415MEDIUMWordPress Squeeze plugin <= 1.7.7 - Directory Traversal vulnerabilityEPSS 0.3%CVE-2024-11136HIGHArbitrary file removal via path traversal in TCL CameraEPSS 0.3%CVE-2025-52712MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal VulnerabilityEPSS 0.2%CVE-2026-21103MEDIUMPath traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.EPSS 0.2%CVE-2026-20513MEDIUMIn Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure iEPSS 0.2%CVE-2022-46826MEDIUMIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulneraEPSS 0.2%CVE-2026-44933HIGHPath Traversal in Plugin Loading in libzyppEPSS 0.2%CVE-2026-1763MEDIUMEnervista UR Setup DLL HijackingEPSS 0.2%