Fallos del tipo CWE-22

5814 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2022-24715HIGHArbitrary code execution for authenticated users in Icinga Web 2EPSS 14.7%CVE-2017-11152—Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackersEPSS 14.6%CVE-2024-46987HIGHArbitrary path traversal in Camaleon CMSEPSS 14.6%CVE-2019-15981HIGHCisco Data Center Network Manager Path Traversal VulnerabilitiesEPSS 14.3%CVE-2019-15982HIGHCisco Data Center Network Manager Path Traversal VulnerabilitiesEPSS 14.3%CVE-2024-53961HIGHColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 14.2%CVE-2024-21518HIGHThis affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to imEPSS 14.1%CVE-2022-3387MEDIUM Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnEPSS 14.0%CVE-2025-58320HIGHDIALink - Directory Traversal Authentication Bypass VulnerabilityEPSS 14.0%CVE-2022-24785HIGHPath Traversal in Moment.jsEPSS 13.9%CVE-2025-62725HIGHDocker Compose Vulnerable to Path Traversal via OCI Artifact Layer AnnotationsEPSS 13.7%CVE-2024-45241HIGHA traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated atEPSS 13.6%CVE-2018-1002204—adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slaEPSS 13.6%CVE-2019-1820MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2019-1819MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2019-1818MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2023-27855CRITICALRockwell Automation ThinManager ThinServer Path Traversal UploadEPSS 13.5%CVE-2024-1873HIGHPath Traversal and Denial of Service in parisneo/lollms-webuiEPSS 13.4%CVE-2024-6255HIGHPath Traversal in gaizhenbiao/chuanhuchatgptEPSS 13.1%CVE-2025-61913CRITICALFlowise is vulnerable to arbitrary file read, arbitrary file writeEPSS 13.0%