Fallos del tipo CWE-22

6626 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-42048CRITICALLangflow: Path Traversal in Langflow Knowledge Bases APIEPSS 4.2%CVE-2022-50932HIGHKyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)EPSS 4.2%CVE-2021-40724HIGHAdobe Acrobat Reader Android Abritrary Code Execution VulnerabilityEPSS 4.2%CVE-2022-38485MEDIUMA directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure. A remote authentEPSS 4.1%CVE-2022-46945CRITICALNagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.EPSS 4.1%CVE-2017-16598—This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems EntEPSS 4.1%CVE-2017-16606—This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems EnterpEPSS 4.1%CVE-2023-33510HIGHJeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters.EPSS 4.1%CVE-2020-7478—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the service: IGSSupdate), EPSS 4.1%CVE-2019-10185HIGHIt was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. EPSS 4.0%CVE-2025-2749HIGHKentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCEEPSS 4.0%KEVCVE-2019-7483HIGHIn SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the preseEPSS 4.0%KEVCVE-2007-5927HIGHDirectory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents vEPSS 4.0%CVE-2024-39722HIGHAn issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in thEPSS 4.0%CVE-2016-7041MEDIUMDrools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory EPSS 4.0%CVE-2018-10589—In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioEPSS 3.9%CVE-2021-21102HIGHAdobe Illustrator DOCX file parsing directory traversal vulnerability could lead to remote code executionEPSS 3.9%CVE-2023-39912MEDIUMZoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is EPSS 3.8%CVE-2017-12694—A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to performEPSS 3.8%CVE-2021-43831HIGHFiles on the host computer can be accessed from the Gradio interfaceEPSS 3.8%