Fallos del tipo CWE-22

5892 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2022-23512HIGHMetersphere is vulnerable to Path Injection.EPSS 0.8%CVE-2026-84671HIGHJenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file sysEPSS 0.8%CVE-2026-92137HIGHJenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is coEPSS 0.8%CVE-2026-49290HIGHSlopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCEEPSS 0.8%CVE-2024-13914HIGHFile Manager Advanced Shortcode <= Multiple Versions - Authenticated (Administrator+) Local JavaScript File Inclusion via ShortcodeEPSS 0.8%CVE-2025-4912MEDIUMSourceCodester Student Result Management System Image File update_student.php path traversalEPSS 0.8%CVE-2026-6344MEDIUMFluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email AttachmentEPSS 0.8%CVE-2024-27279MEDIUMDirectory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.EPSS 0.8%CVE-2025-67684CRITICALRemote Code Execution via Local File Inclusion in Quick.CartEPSS 0.8%CVE-2024-5273MEDIUMJenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing EPSS 0.8%CVE-2021-47755HIGHOliver Library Server v5 - Arbitrary File DownloadEPSS 0.8%CVE-2021-47751MEDIUMCuteEditor for PHP 6.6 - Directory TraversalEPSS 0.8%CVE-2022-37906MEDIUMAn authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability resEPSS 0.8%CVE-2024-4941HIGHLocal File Inclusion in JSON component in gradio-app/gradioEPSS 0.8%CVE-2024-50336MEDIUMmatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversalEPSS 0.8%CVE-2026-30286CRITICALAn arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal fiEPSS 0.8%CVE-2026-25872MEDIUMJUNG Smart Panel 5.1 KNX Unauthenticated Path TraversalEPSS 0.8%CVE-2023-47624HIGHAudiobookshelf Arbitrary File Read VulnerabilityEPSS 0.8%CVE-2022-44299MEDIUMSiteServerCMS 7.1.3 sscms has a file read vulnerability.EPSS 0.8%CVE-2024-1790MEDIUMAjax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File ReadEPSS 0.8%