Fallos del tipo CWE-22

6626 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2023-51364HIGHQTS, QuTS hero, QuTScloudEPSS 39.7%CVE-2023-32235HIGHGhost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directoEPSS 39.1%CVE-2023-30804MEDIUMSangfor Next-Gen Application Firewall Authenticated File DisclosureEPSS 38.9%CVE-2022-27498CRITICALA directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10EPSS 38.3%CVE-2024-55550MEDIUMMitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insuEPSS 38.2%KEVCVE-2024-47010HIGHPath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.EPSS 37.8%CVE-2023-41474MEDIUMDirectory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensitive information via tEPSS 37.6%CVE-2021-37200—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system cEPSS 37.4%CVE-2022-24629CRITICALAn issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory trEPSS 37.2%CVE-2021-38163CRITICALSAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administraEPSS 36.9%KEVCVE-2022-1993HIGHPath Traversal in gogs/gogsEPSS 36.7%CVE-2023-5399CRITICAL A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tamperinEPSS 36.4%CVE-2025-2264HIGHSantesoft Sante PACS Server Path Traversal Information DisclosureEPSS 35.4%CVE-2023-51365HIGHQTS, QuTS hero, QuTScloudEPSS 34.8%CVE-2024-10470CRITICALWPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and DeletionEPSS 34.8%CVE-2024-47841MEDIUMPath traversal when loading stylesheetsEPSS 34.6%CVE-2023-39584—Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.EPSS 34.5%CVE-2025-54453HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allowEPSS 34.3%CVE-2025-2449HIGHNI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution VulnerabilityEPSS 33.7%CVE-2024-13181HIGHPath Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresseEPSS 33.2%