Fallos del tipo CWE-22

6626 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2024-50324HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authentiEPSS 18.7%CVE-2024-23472CRITICALSolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilityEPSS 18.6%CVE-2015-5345MEDIUMThe Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects bEPSS 18.4%CVE-2024-34787HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthentEPSS 17.8%CVE-2024-55415MEDIUMDevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.EPSS 17.6%CVE-2025-6793CRITICALMarvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilityEPSS 17.5%CVE-2022-1119HIGHSimple File List <= 3.2.7 - Arbitrary File DownloadEPSS 17.5%CVE-2025-61686CRITICALReact Router has Path Traversal in File Session StorageEPSS 17.3%CVE-2025-58320HIGHDIALink - Directory Traversal Authentication Bypass VulnerabilityEPSS 17.3%CVE-2025-25254MEDIUMAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and belowEPSS 17.1%CVE-2025-12490HIGHNetgate pfSense CE Suricata Path Traversal Remote Code Execution VulnerabilityEPSS 17.0%CVE-2022-0902HIGHABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root accessEPSS 16.9%CVE-2024-7928MEDIUMFastAdmin lang path traversalEPSS 16.9%CVE-2024-44625HIGHGogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.EPSS 16.5%CVE-2025-9713HIGHPath traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution.EPSS 16.1%CVE-2023-42657CRITICALWS_FTP Server Directory TraversalEPSS 16.0%CVE-2025-62725HIGHDocker Compose Vulnerable to Path Traversal via OCI Artifact Layer AnnotationsEPSS 15.8%CVE-2016-6321HIGHDirectory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an iEPSS 15.7%CVE-2023-1009MEDIUMDrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversalEPSS 15.7%CVE-2024-9381HIGHPath traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.EPSS 15.6%