Weaknesses of type CWE-35

184 results

Bypass de restrição de diretório com sequências de caminho duplicadas

O software tenta restringir o acesso a um diretório específico, mas falha em neutralizar sequências como '.../...//' (barras e pontos duplicados) que conseguem 'escapar' para fora do diretório permitido. Um atacante fornece uma entrada malformada que, depois de processada, aponta para arquivos fora da zona de segurança pretendida.

Example

Um sistema de galeria de fotos só deveria servir imagens de '/uploads/'. Um usuário malicioso solicita '/uploads/.../...//../../../etc/passwd' esperando que o parser de caminhos normalize incorretamente e acesse um arquivo sensível fora da restrição.

How to mitigate

Valide e normalize completamente o caminho fornecido ANTES de qualquer verificação (use funções nativas como `realpath()` em PHP ou `Path.resolve()` em Node.js), depois confirme que o resultado está dentro do diretório permitido. Rejeite entrada com sequências suspeitas ('..', '//', '...') logo na entrada.

CVE-2025-53880HIGHsusemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversalEPSS 0.3%CVE-2025-59181MEDIUMPath traversal VulnerabilityEPSS 0.3%CVE-2026-66695MEDIUMWordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerabilityEPSS 0.3%CVE-2026-32415MEDIUMWordPress Squeeze plugin <= 1.7.7 - Directory Traversal vulnerabilityEPSS 0.3%CVE-2024-11136HIGHArbitrary file removal via path traversal in TCL CameraEPSS 0.3%CVE-2022-46826MEDIUMIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulneraEPSS 0.2%CVE-2025-52712MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal VulnerabilityEPSS 0.2%CVE-2026-44933HIGHPath Traversal in Plugin Loading in libzyppEPSS 0.2%CVE-2026-1763MEDIUMEnervista UR Setup DLL HijackingEPSS 0.2%CVE-2025-58380MEDIUMDirectory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep commandEPSS 0.2%CVE-2025-58381MEDIUMDirectory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commandsEPSS 0.2%CVE-2025-20313MEDIUMMultiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticEPSS 0.2%CVE-2026-20513MEDIUMIn Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure iEPSS 0.2%CVE-2026-21103MEDIUMPath traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.EPSS 0.2%CVE-2026-24315MEDIUMPath Traversal Vulnerability in SAP Fiori (launchpad)EPSS 0.2%CVE-2025-40573MEDIUMA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to pEPSS 0.2%CVE-2025-43886MEDIUMDell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability. A high privilegeEPSS 0.2%CVE-2025-66004MEDIUMLocal privilege escalation in usbmuxd from arbitrary local user to usbmuxEPSS 0.2%CVE-2025-5454MEDIUMAn ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escaEPSS 0.2%CVE-2025-60835HIGHAn issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.EPSS 0.1%