Fallos del tipo CWE-22

6626 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2021-32803HIGHArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoningEPSS 7.8%CVE-2022-38120MEDIUMPOWERCOM CO., LTD. UPSMON PRO - Path TraversalEPSS 7.7%CVE-2020-16245—Advantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal vulnerabilities that could allow an attacker tEPSS 7.7%CVE-2023-25289HIGHDirectory Traversal vulnerability in virtualreception Digital Receptie version win7sp1_rtm.101119-1850 6.1.7601.1.0.65792 in embedded web seEPSS 7.7%CVE-2026-34619HIGHColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 7.6%CVE-2024-38652HIGHPath traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of servEPSS 7.6%CVE-2024-9935HIGHPDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File DownloadEPSS 7.6%CVE-2026-3051MEDIUMDataLinkDC dinky Project Name GitRepository.java getProjectDir path traversalEPSS 7.3%CVE-2025-68705HIGHRustFS Path Traversal VulnerabilityEPSS 7.3%CVE-2026-24848HIGHOpenEMR Arbitrary File Write leading to Remote Code ExecutionEPSS 7.2%CVE-2024-23476CRITICALSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution VulnerabilityEPSS 7.1%CVE-2023-33177HIGHXibo CMS vulnerable to Remote Code Execution through Zip SlipEPSS 7.0%CVE-2025-68145MEDIUMmcp-server-git has missing path validation when using --repository flagEPSS 7.0%CVE-2018-0300—A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation FirewallEPSS 7.0%CVE-2022-34127HIGHThe Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter.EPSS 6.7%CVE-2023-28459MEDIUMpretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents thEPSS 6.6%CVE-2013-1891—In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.EPSS 6.6%CVE-2026-20148MEDIUMCisco Identity Services Engine Path Traversal VulnerabilityEPSS 6.5%CVE-2024-41628HIGHDirectory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9EPSS 6.5%CVE-2024-10516HIGHSwift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'EPSS 6.4%