Weaknesses of type CWE-36

144 results

Travessia de diretório via caminho absoluto

A aplicação constrói caminhos de arquivo usando entrada externa, mas não valida adequadamente caminhos absolutos (como /etc/passwd ou C:\Windows\System32). Um atacante pode fornecer um caminho completo que ignora completamente a restrição de diretório pretendida, acessando arquivos fora da pasta permitida.

Example

Um serviço web que baixa arquivos do diretório /uploads/user123/ recebe a entrada do usuário para nome do arquivo. Se o usuário envia '/etc/passwd' em vez de apenas 'documento.pdf', o sistema tenta ler /etc/passwd, não /uploads/user123/etc/passwd, expondo dados sensíveis.

How to mitigate

Valide e normalize toda entrada de caminho (remova .., barras iniciais, e sequências de escape), use uma lista de permissão de caracteres seguros, e canonicalize o caminho final antes de acessar o arquivo para garantir que está realmente dentro do diretório esperado. Alternativa robusta: use IDs ou índices em vez de nomes de arquivo fornecidos pelo usuário.

CVE-2026-32175MEDIUM.NET Core Tampering VulnerabilityEPSS 0.7%CVE-2024-1703LOWZhongBangKeJi CRMEB openfile absolute path traversalEPSS 0.7%CVE-2024-33620HIGHAbsolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the fEPSS 0.7%CVE-2026-89009HIGHWAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_serverEPSS 0.7%CVE-2026-1330HIGHHAMASTAR Technology｜MeetingHub - Arbitrary File ReadEPSS 0.7%CVE-2025-14848MEDIUMAdvantech WebAccess/SCADA Absolute Path TraversalEPSS 0.7%CVE-2025-7846HIGHWordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields FunctionEPSS 0.7%CVE-2025-8909HIGHWellChoose｜Organization Portal System - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2026-57211MEDIUMRabbitMQ: UNC SSRF affecting the management UI on WindowsEPSS 0.6%CVE-2025-5927HIGHEverest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File DeletionEPSS 0.6%CVE-2024-45290HIGHPath traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheetEPSS 0.6%CVE-2024-20379MEDIUMA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower ManagemeEPSS 0.6%CVE-2024-10651MEDIUMCHANGING Information Technology IDExpert - Arbitrary File Read through Path TraversalEPSS 0.6%CVE-2025-8009MEDIUMSecurity Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File ReadEPSS 0.6%CVE-2026-10044HIGHai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/EPSS 0.6%CVE-2024-8778MEDIUMThe SYSCOM Group OMFLOW - Arbitrary File ReadEPSS 0.6%CVE-2024-7323MEDIUMDigiwin EasyFlow .NET - Arbitrary File DownloadEPSS 0.6%CVE-2023-50955LOWIBM InfoSphere Information Server information disclosureEPSS 0.6%CVE-2024-28806HIGHAn issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path.EPSS 0.6%CVE-2023-1176MEDIUMAbsolute Path Traversal in mlflow/mlflowEPSS 0.6%