Fallos del tipo CWE-22

5890 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-25527MEDIUMchangedetection.io vulnerable to unauthenticated static path traversalEPSS 0.9%CVE-2023-45867—ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion vulnerability in the ScormAicc module. An EPSS 0.9%CVE-2026-6670MEDIUMMedia Sync <= 1.4.9 - Authenticated (Author+) Path Traversal via 'sub_dir' and 'media_items' ParametersEPSS 0.9%CVE-2026-32820HIGHdataCycle Public Markdown Path Traversal Via /docs/*pathEPSS 0.9%CVE-2025-67076HIGHDirectory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system viaEPSS 0.9%CVE-2020-36639MEDIUMAlliedModders AMX Mod X Console Command adminvote.sma cmdVoteMap path traversalEPSS 0.9%CVE-2024-23787HIGHPath traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-EPSS 0.9%CVE-2026-42200HIGHCoolify: PostgreSQL Init Script Path Traversal Leads to Arbitrary File Write and Root RCEEPSS 0.9%CVE-2026-44307HIGHMako: Path traversal via backslash URI on Windows in TemplateLookupEPSS 0.9%CVE-2022-38165CRITICALArbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitEPSS 0.9%CVE-2020-36651MEDIUMyoungerheart nodeserver nodeserver.js path traversalEPSS 0.9%CVE-2026-2448HIGHPage Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File InclusionEPSS 0.9%CVE-2026-30632HIGHDirectory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create_doc tool.EPSS 0.9%CVE-2026-30633HIGHDirectory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools.EPSS 0.9%CVE-2026-74239HIGHXenForo < 2.3.13 Path Traversal via Style Archive Importer on WindowsEPSS 0.9%CVE-2023-32317MEDIUMAutolab tar slip in cheat checker functionality (`GHSL-2023-082`)EPSS 0.9%CVE-2019-25734MEDIUMContact Form by WD 1.13.1 CSRF to Local File InclusionEPSS 0.9%CVE-2025-28384CRITICALAn issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.EPSS 0.9%CVE-2024-2385HIGHElementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via WidgetsEPSS 0.9%CVE-2025-28382HIGHAn issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.EPSS 0.9%