Fallos del tipo CWE-22

5949 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2021-24761—Error Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRFEPSS 0.6%CVE-2026-13369HIGHNinja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' ParameterEPSS 0.6%CVE-2024-41765MEDIUMIBM Engineering Lifecycle Optimization - Publishing directory traversalEPSS 0.6%CVE-2025-9215MEDIUMStoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File DownloadEPSS 0.6%CVE-2025-3562MEDIUMYonyou YonBIP userfile FileInputStream path traversalEPSS 0.6%CVE-2024-34521LOWA directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows aEPSS 0.6%CVE-2026-44440MEDIUMERPNext: Path Traversal Leading to Sensitive File ExposureEPSS 0.6%CVE-2025-23059MEDIUMSensitive Information Disclosure in HPE Aruba Networking ClearPass Policy ManagerEPSS 0.6%CVE-2026-86099HIGHChainlit through 2.12.0 Path Traversal via socket.io sessionIdEPSS 0.6%CVE-2024-51966MEDIUMDirectory traversal vulnerability in ArcGIS ServerEPSS 0.6%CVE-2026-54675HIGHFreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang ModuleEPSS 0.6%CVE-2024-33560CRITICALWordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-50843MEDIUMA Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers atEPSS 0.6%CVE-2024-27776CRITICALMileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')EPSS 0.6%CVE-2025-66249MEDIUMApache Livy: Unauthorized directory accessEPSS 0.6%CVE-2024-55515CRITICALA vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_ipslib.pEPSS 0.6%CVE-2021-46856HIGHThe multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confEPSS 0.6%CVE-2018-25311HIGHVideoFlow Digital Video Protection DVP 2.10 Authenticated Directory TraversalEPSS 0.6%CVE-2025-7566MEDIUMjshERP SystemConfigController.java exportExcelByParam path traversalEPSS 0.6%CVE-2024-44014CRITICALWordPress Vmax Project Manager plugin <= 1.0 - Local File Inclusion to RCE vulnerabilityEPSS 0.6%