Fallos del tipo CWE-22

5967 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-54650HIGHopenhole-server vulnerable to path traversal via URL-decoded request pathEPSS 0.5%CVE-2026-3585HIGHThe Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_importEPSS 0.5%CVE-2024-27869HIGHThe issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to record thEPSS 0.5%CVE-2025-3355HIGHIBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operationsEPSS 0.5%CVE-2025-3295MEDIUMWP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File ReadEPSS 0.5%CVE-2026-33528MEDIUMGoDoxy has a Path Traversal Vulnerability in its File APIEPSS 0.5%CVE-2024-37169MEDIUM@jmondi/url-to-png arbitrary file read via Playwright's screenshot feature exploiting file wrapperEPSS 0.5%CVE-2026-44641HIGHMicrosoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during installEPSS 0.5%CVE-2024-7609CRITICALDirectory Traversal in Vidco Software's VOC TESTEREPSS 0.5%CVE-2022-4494MEDIUMbspkrs MCPMappingViewer ZIP File RemoteZipHandler.java extractZip path traversalEPSS 0.5%CVE-2023-35947MEDIUMPath traversal vulnerabilities in handling of Tar archives in GradleEPSS 0.5%CVE-2024-35754HIGHWordPress Ovic Importer plugin <= 1.6.3 - Arbitrary File Download vulnerabilityEPSS 0.5%CVE-2026-6410MEDIUM@fastify/static vulnerable to path traversal in directory listingEPSS 0.5%CVE-2026-32727HIGHSciTokens: Authorization Bypass via Path Traversal in Scope ValidationEPSS 0.5%CVE-2026-53594MEDIUMFreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted PathEPSS 0.5%CVE-2024-45443MEDIUMDirectory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confEPSS 0.5%CVE-2025-31053HIGHWordPress KBx Pro Ultimate plugin < 8.0.5 - Arbitrary File Deletion VulnerabilityEPSS 0.5%CVE-2026-49831MEDIUMDSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)EPSS 0.5%CVE-2026-84373MEDIUMVitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect MockEPSS 0.5%CVE-2026-34242HIGHWeblate: Arbitrary File Read via SymlinkEPSS 0.5%