Fallos del tipo CWE-22

5969 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2025-47535HIGHWordPress Opal Woo Custom Product Variation plugin <= 1.2.0 - Arbitrary File Deletion VulnerabilityEPSS 0.5%CVE-2025-3445HIGHA Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file coEPSS 0.5%CVE-2024-10313HIGHiniNet Solutions SpiderControl SCADA PC HMI Editor Path TraversalEPSS 0.5%CVE-2024-47558HIGHAuthenticated RCE via Path TraversalEPSS 0.5%CVE-2025-46527MEDIUMWordPress Web3Press – Decentralize Publishing with Writing NFT plugin <= 3.2.0 - Arbitrary File Read vulnerabilityEPSS 0.5%CVE-2026-48866CRITICALWordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerabilityEPSS 0.5%CVE-2024-47559HIGHAuthenticated RCE via Path TraversalEPSS 0.5%CVE-2026-20146MEDIUMCisco Identity Services Engine Path Traversal VulnerabilityEPSS 0.5%CVE-2024-23607MEDIUMF5OS QKView utility vulnerabilityEPSS 0.5%CVE-2025-33032MEDIUMQTS, QuTS heroEPSS 0.5%CVE-2026-4619MEDIUMPath Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.EPSS 0.5%CVE-2026-60114HIGHSustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup RestoreEPSS 0.5%CVE-2025-9345MEDIUMFile Manager, Code Editor, and Backup by Managefy <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File DownloadEPSS 0.5%CVE-2026-13105HIGHIBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesEPSS 0.5%CVE-2026-67613MEDIUMCyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReportEPSS 0.5%CVE-2025-43813MEDIUMPossible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsuppoEPSS 0.5%CVE-2026-32033MEDIUMOpenClaw < 2026.2.24 - Path Traversal via @-prefixed Absolute Paths in Workspace Boundary ValidationEPSS 0.5%CVE-2025-61624MEDIUMAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7EPSS 0.5%CVE-2026-5114MEDIUMSpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File ReadEPSS 0.5%CVE-2025-22167HIGHThis High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 ofEPSS 0.5%