Fallos del tipo CWE-22

5810 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2022-1390—Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File ReadEPSS 21.9%CVE-2025-54261CRITICALColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 21.3%CVE-2021-21234HIGHDirectory TraversalEPSS 21.0%CVE-2022-41657CRITICAL Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be uEPSS 20.9%CVE-2020-25237—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). WhenEPSS 20.6%CVE-2025-68472HIGHMindsDB has improper sanitation of filepath that leads to information disclosure and DOSEPSS 20.3%CVE-2025-12490HIGHNetgate pfSense CE Suricata Path Traversal Remote Code Execution VulnerabilityEPSS 20.1%CVE-2022-1119HIGHSimple File List <= 3.2.7 - Arbitrary File DownloadEPSS 20.0%CVE-2023-0156MEDIUMAll-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via TraversalEPSS 19.9%CVE-2021-41293HIGHECOA BAS controller - Path Traversal-3EPSS 19.9%CVE-2018-17934—NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the inEPSS 19.7%CVE-2026-33497HIGHLangflow: /profile_pictures/{folder_name}/{file_name} endpoint file readingEPSS 19.6%CVE-2025-30290HIGHColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 19.5%CVE-2019-25246HIGHBeward N100 H.264 VGA IP Camera M2.1.6 Authenticated File DisclosureEPSS 18.9%CVE-2024-50324HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authentiEPSS 18.7%CVE-2024-23472CRITICALSolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilityEPSS 18.6%CVE-2024-4956HIGHNexus Repository 3 - Path TraversalEPSS 18.2%CVE-2024-34787HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthentEPSS 17.8%CVE-2025-8356CRITICALPath Traversal leading to RCEEPSS 17.7%CVE-2025-61686CRITICALReact Router has Path Traversal in File Session StorageEPSS 17.6%