Fallos del tipo CWE-22

5810 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2018-3760—There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. SpeciaEPSS 26.7%CVE-2026-27305HIGHColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 26.3%CVE-2021-22797HIGHA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious scriEPSS 26.1%CVE-2021-43788MEDIUMPath traversal in translator module of NobeBBEPSS 25.8%CVE-2020-8227—Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files ouEPSS 25.8%CVE-2024-5182HIGHPath Traversal in mudler/localaiEPSS 25.5%CVE-2022-2863—WPvivid Backup < 0.9.76 - Admin+ Arbitrary File ReadEPSS 25.3%CVE-2019-18187HIGHTrend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extracEPSS 25.1%KEVCVE-2022-41772CRITICAL Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversaEPSS 24.9%CVE-2024-4701CRITICALPath Traversal vulnerability via File Uploads in GenieEPSS 24.6%CVE-2025-4632CRITICALImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackEPSS 24.3%KEVCVE-2025-25279CRITICALArbitrary file read in Mattermost Boards via import & export board archiveEPSS 24.0%CVE-2024-25830CRITICALF-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remoteEPSS 24.0%CVE-2022-43771MEDIUMHitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') EPSS 23.9%CVE-2017-17058HIGHThe WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emaEPSS 23.7%CVE-2025-54453HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allowEPSS 23.7%CVE-2024-2434HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabEPSS 23.2%CVE-2023-29186HIGHDirectory/Path Traversal vulnerability in SAP NetWeaver.EPSS 23.0%CVE-2025-25231HIGHOmnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitiEPSS 22.3%CVE-2022-4510HIGHPath Traversal in binwalkEPSS 22.0%