Fallos del tipo CWE-22

5970 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2021-47942HIGHHome Assistant Community Store 1.10.0 Path Traversal Account TakeoverEPSS 0.5%CVE-2024-33541MEDIUMWordPress Better Elementor Addons plugin <= 1.4.1 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2024-38772MEDIUMWordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-22167HIGHThis High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 ofEPSS 0.5%CVE-2025-43813MEDIUMPossible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsuppoEPSS 0.5%CVE-2024-43328HIGHWordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2026-5114MEDIUMSpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File ReadEPSS 0.5%CVE-2026-77763HIGHJuiceFS Local Filestore Backend Joins Object Keys onto the Storage Root Without a Containment Check, Allowing Writes Outside the Configured DirectoryEPSS 0.5%CVE-2026-45225HIGHHeym < 0.0.21 Path Traversal File Upload via upload_file()EPSS 0.5%CVE-2026-84598HIGHA path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. AEPSS 0.5%CVE-2024-38716MEDIUMWordPress Events Calendar for Google plugin <= 2.1.0 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-61624MEDIUMAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7EPSS 0.5%CVE-2026-17088MEDIUMIBM i is Affected By Multiple Vulnerabilities in Digital Certificate ManagerEPSS 0.5%CVE-2024-36267HIGHPath traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user mayEPSS 0.5%CVE-2025-0799MEDIUMIBM App Connect Enterprise Arbitrary File WriteEPSS 0.5%CVE-2023-47679MEDIUMWordPress Qi Addons For Elementor plugin <= 1.6.3 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2026-2421MEDIUMilGhera Carta Docente for WooCommerce <= 1.5.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'cert' ParameterEPSS 0.5%CVE-2026-18106MEDIUMIBM i is Affected By Multiple Vulnerabilities in Navigator for iEPSS 0.5%CVE-2026-75887HIGHOpenshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerEPSS 0.5%CVE-2022-4982HIGHDBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFIEPSS 0.5%