Fallos del tipo CWE-22

6626 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2024-12088MEDIUMRsync: --safe-links option bypass leads to path traversalEPSS 4.6%CVE-2018-0420MEDIUMCisco Wireless LAN Controller Software Directory Traversal VulnerabilityEPSS 4.6%CVE-2023-50916HIGHKyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local paEPSS 4.6%CVE-2024-30851MEDIUMDirectory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the downlEPSS 4.6%CVE-2026-23491CRITICALInvoicePlane has Unauthenticated Path Traversal in Guest ControllerEPSS 4.6%CVE-2026-104286CRITICALAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FEPSS 4.6%KEVCVE-2020-27870HIGHThis vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1EPSS 4.5%CVE-2019-6754HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interactionEPSS 4.5%CVE-2023-6015CRITICALMLflow Arbitrary File UploadEPSS 4.5%CVE-2021-21501—ServiceComb ServiceCenter Directory TraversalEPSS 4.4%CVE-2025-44177HIGHA directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpEPSS 4.4%CVE-2024-9362HIGHDirectory Traversal in polyaxon/polyaxonEPSS 4.4%CVE-2020-6110HIGHAn exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snEPSS 4.4%CVE-2021-3924HIGHPath Traversal in getgrav/gravEPSS 4.4%CVE-2016-9484—PHP FormMail Generator generates PHP code for standard web forms, and the code generated does not properly validate user input folder directories and is vulnerable to path traversalEPSS 4.4%CVE-2012-10054CRITICALUmbraco CMS < 4.7.1 codeEditorSave.asmx RCEEPSS 4.3%CVE-2022-2711HIGHWP All Import < 3.6.9 - Admin+ Directory traversal via file uploadEPSS 4.3%CVE-2021-3907HIGHArbitrary filepath traversal via URI injectionEPSS 4.2%CVE-2014-5436—A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43EPSS 4.2%CVE-2025-34045HIGHWeiPHP Path Traversal Arbitrary File ReadEPSS 4.2%