Fallos del tipo CWE-22

5883 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-74236HIGHGFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion HandlerEPSS 0.9%CVE-2020-1606MEDIUMJunos OS: Path traversal vulnerability in J-WebEPSS 0.9%CVE-2026-73033HIGHSucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.phpEPSS 0.9%CVE-2024-10626HIGHWooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.9%CVE-2022-50950HIGHWebile 1.0.1 Directory Traversal Vulnerability via Web ApplicationEPSS 0.9%CVE-2026-77068HIGHn8n before 2.34.1 Remote Code Execution via Path TraversalEPSS 0.9%CVE-2023-41578—Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.EPSS 0.9%CVE-2025-32431HIGHTraefik has a possible vulnerability with the path matchersEPSS 0.9%CVE-2022-47762HIGHIn gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.EPSS 0.9%CVE-2026-77807HIGHAcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' ParameterEPSS 0.9%CVE-2023-44306MEDIUM Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit thEPSS 0.9%CVE-2026-69095HIGHOpenWrt luci-app-bmx7 Path Traversal via bmx7-infoEPSS 0.9%CVE-2024-0406MEDIUMMholt/archiver: path traversal vulnerabilityEPSS 0.9%CVE-2026-12997HIGHGravity Forms <= 2.10.4 - Unauthenticated Arbitrary File Read via 'gform_uploaded_files' ParameterEPSS 0.9%CVE-2026-36848HIGHGigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.EPSS 0.9%CVE-2026-50234HIGHLyrion Music Server 9.2.0 Path Traversal File ReadEPSS 0.9%CVE-2026-9559CRITICALA path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign importsEPSS 0.9%CVE-2024-21677HIGHThis High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. This Path Traversal vulnerabilitEPSS 0.9%CVE-2025-11941MEDIUMe107 CMS Avatar image.php path traversalEPSS 0.9%CVE-2024-12065HIGHLocal File Inclusion in haotian-liu/llavaEPSS 0.9%