Fallos del tipo CWE-22

5813 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2025-6793CRITICALMarvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilityEPSS 17.3%CVE-2023-42657CRITICALWS_FTP Server Directory TraversalEPSS 17.0%CVE-2025-25254MEDIUMAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and belowEPSS 16.9%CVE-2024-7928MEDIUMFastAdmin lang path traversalEPSS 16.9%CVE-2022-0902HIGHABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root accessEPSS 16.5%CVE-2024-44625HIGHGogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.EPSS 15.9%CVE-2025-59366CRITICALAn authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba funcEPSS 15.8%CVE-2016-6321HIGHDirectory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an iEPSS 15.7%CVE-2023-1009MEDIUMDrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversalEPSS 15.7%CVE-2024-9381HIGHPath traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.EPSS 15.6%CVE-2024-55415MEDIUMDevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.EPSS 15.5%CVE-2025-9713HIGHPath traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution.EPSS 15.3%CVE-2024-48884HIGHA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1,EPSS 15.3%CVE-2021-32804HIGHArbitrary File Creation/Overwrite due to insufficient absolute path sanitizationEPSS 15.1%CVE-2025-34040CRITICALSeeyon Zhiyuan OA System Path Traversal File UploadEPSS 15.1%CVE-2022-1391—Cab fare calculator < 1.0.4 - Unauthenticated LFIEPSS 15.1%CVE-2025-34176MEDIUMNetgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information DisclosureEPSS 15.0%CVE-2025-27210HIGHAn incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. EPSS 14.9%CVE-2019-3816HIGHOpenwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemoEPSS 14.7%CVE-2024-38816HIGHCVE-2024-38816: Path traversal vulnerability in functional web frameworksEPSS 14.7%