Fallos del tipo CWE-22

6626 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2025-34040CRITICALSeeyon Zhiyuan OA System Path Traversal File UploadEPSS 15.4%CVE-2024-48884MEDIUMA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1,EPSS 15.2%CVE-2021-32804HIGHArbitrary File Creation/Overwrite due to insufficient absolute path sanitizationEPSS 15.1%CVE-2022-1391—Cab fare calculator < 1.0.4 - Unauthenticated LFIEPSS 15.1%CVE-2022-24715HIGHArbitrary code execution for authenticated users in Icinga Web 2EPSS 14.9%CVE-2019-3816HIGHOpenwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemoEPSS 14.7%CVE-2026-28208MEDIUMJunrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/UnixEPSS 14.7%CVE-2017-11152—Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackersEPSS 14.6%CVE-2024-46987HIGHArbitrary path traversal in Camaleon CMSEPSS 14.6%CVE-2025-27210HIGHAn incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. EPSS 14.3%CVE-2019-15981HIGHCisco Data Center Network Manager Path Traversal VulnerabilitiesEPSS 14.3%CVE-2019-15982HIGHCisco Data Center Network Manager Path Traversal VulnerabilitiesEPSS 14.3%CVE-2024-53961HIGHColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 14.2%CVE-2024-21518HIGHThis affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to imEPSS 14.1%CVE-2022-3387MEDIUM Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnEPSS 14.0%CVE-2025-61913CRITICALFlowise is vulnerable to arbitrary file read, arbitrary file writeEPSS 13.9%CVE-2022-24785HIGHPath Traversal in Moment.jsEPSS 13.8%CVE-2026-33309CRITICALLangflow has an Arbitrary File Write (RCE) via v2 APIEPSS 13.8%CVE-2024-6255HIGHPath Traversal in gaizhenbiao/chuanhuchatgptEPSS 13.7%CVE-2024-45241HIGHA traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated atEPSS 13.6%