Fallos del tipo CWE-22

6626 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2019-1820MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2019-1819MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2019-1818MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2018-1002204—adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slaEPSS 13.5%CVE-2023-27855CRITICALRockwell Automation ThinManager ThinServer Path Traversal UploadEPSS 13.5%CVE-2025-40737HIGHA vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when EPSS 13.4%CVE-2025-40738HIGHA vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when EPSS 13.4%CVE-2024-1873HIGHPath Traversal and Denial of Service in parisneo/lollms-webuiEPSS 13.4%CVE-2026-1056CRITICALSnow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path TraversalEPSS 13.3%CVE-2025-4185MEDIUMWangshen SecGate 3600 g=obj_area_export_save path traversalEPSS 13.3%CVE-2025-5964HIGHPath traversal in M-Files APIEPSS 13.0%CVE-2026-25895CRITICALFUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload APIEPSS 12.8%CVE-2021-35250HIGHDirectory Transversal Vulnerability in Serv-U 15.3EPSS 12.8%CVE-2024-34854CRITICALF-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`EPSS 12.8%CVE-2021-21251HIGHZipSlip Arbitrary File UploadEPSS 12.7%CVE-2018-1002202—zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip aEPSS 12.6%CVE-2025-3577MEDIUM**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00EPSS 12.6%CVE-2026-40383HIGHJoomla! Core - [20260509] - LFI in HTMLView layout parameterEPSS 12.5%CVE-2025-14704MEDIUMShiguangwu sgwbox N3 API eshell path traversalEPSS 12.5%CVE-2025-59366CRITICALAn authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba funcEPSS 12.5%