Fallos del tipo CWE-22

5890 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-18554HIGHIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.9%CVE-2021-33722—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability EPSS 0.9%CVE-2026-84889HIGHA path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystemEPSS 0.9%CVE-2024-8875MEDIUMvedees wcms finder.php path traversalEPSS 0.9%CVE-2025-22923HIGHAn issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST reqEPSS 0.9%CVE-2024-23721HIGHA Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calEPSS 0.9%CVE-2025-15031HIGHPath Traversal Vulnerability in mlflow/mlflowEPSS 0.9%CVE-2025-34058HIGHHikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File ReadEPSS 0.9%CVE-2026-25475MEDIUMOpenClaw Vulnerable to Local File Inclusion via MEDIA: Path ExtractionEPSS 0.9%CVE-2025-29847HIGHApache Linkis: Arbitrary File Read via Double URL Encoding BypassEPSS 0.9%CVE-2023-27577MEDIUMPath Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarumEPSS 0.9%CVE-2025-56431HIGHDirectory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via thEPSS 0.9%CVE-2025-56430HIGHDirectory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via thEPSS 0.9%CVE-2026-37531CRITICALAGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367EPSS 0.9%CVE-2026-67200HIGHPerspective 5.0.0 Path Traversal via cwd_static_file_handlerEPSS 0.9%CVE-2026-26064CRITICALcalibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code ExecutionEPSS 0.9%CVE-2022-4583MEDIUMjLEMS JUtil.java unpackJar path traversalEPSS 0.9%CVE-2024-32117MEDIUMAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.EPSS 0.9%CVE-2023-27475HIGHGoutil vulnerable to path traversal when unzipping filesEPSS 0.8%CVE-2026-4280MEDIUMBreaking News WP <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Local File Inclusion/ReadEPSS 0.8%