Fallos del tipo CWE-22

5890 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-23907MEDIUMApache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example CodeEPSS 0.9%CVE-2025-46783CRITICALPath traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitEPSS 0.9%CVE-2026-35485HIGHtext-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authenticationEPSS 0.9%CVE-2022-23522HIGHArbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdbEPSS 0.9%CVE-2020-7495—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EPSS 0.9%CVE-2025-59709MEDIUMAn issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input in a path to be read by the server, a SupeEPSS 0.9%CVE-2020-7529—A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote ConnecEPSS 0.9%CVE-2023-30548MEDIUMPath traversal vulnerability in gatsby-plugin-sharpEPSS 0.9%CVE-2024-45189MEDIUMMage AI git content request remote arbitrary file leakEPSS 0.9%CVE-2026-3695MEDIUMSourceCodester Modern Image Gallery App delete.php path traversalEPSS 0.9%CVE-2026-61445CRITICALPraisonAI before 4.6.78 Arbitrary File Write and Command ExecutionEPSS 0.9%CVE-2024-45188MEDIUMMage AI file content request remote arbitrary file leakEPSS 0.9%CVE-2024-7551MEDIUMjuzaweb CMS Theme Editor default path traversalEPSS 0.9%CVE-2024-27121HIGHPath traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary filEPSS 0.9%CVE-2019-25577MEDIUMSeoToaster Ecommerce 3.0.0 Local File Inclusion via backend_themeEPSS 0.9%CVE-2026-27819HIGHVikunja has Path Traversal in CLI RestoreEPSS 0.9%CVE-2026-50203CRITICALApache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry namesEPSS 0.9%CVE-2024-8704HIGHAdvanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_localeEPSS 0.9%CVE-2024-46648HIGHeNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.EPSS 0.9%CVE-2024-46645HIGHeNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.EPSS 0.9%