Fallos del tipo CWE-22

5837 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2025-59304CRITICALA directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via EPSS 3.5%CVE-2023-39460HIGHTriangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation VulnerabilityEPSS 3.4%CVE-2019-16776HIGHUnauthorized File Access in npm CLI before before version 6.13.3EPSS 3.4%CVE-2022-48253CRITICALnhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote serveEPSS 3.4%CVE-2026-65694HIGHMicroweber CMS 2.0.20 Path Traversal via ServeStaticFileControllerEPSS 3.4%CVE-2017-16595—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise ManagEPSS 3.4%CVE-2017-16591—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise ManagEPSS 3.4%CVE-2017-16596—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise ManagEPSS 3.4%CVE-2017-16592—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise ManagEPSS 3.4%CVE-2023-40279HIGHAn issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET requesEPSS 3.4%CVE-2024-23468HIGHSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityEPSS 3.4%CVE-2019-10218MEDIUMA flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathEPSS 3.4%CVE-2021-21037HIGHAcrobat Reader DC Path Traversal Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 3.3%CVE-2026-25732HIGHNiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File WriteEPSS 3.3%CVE-2019-3880MEDIUMA flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could useEPSS 3.3%CVE-2024-2024HIGHFolders Pro <= 3.0.2 - Authenticated(Author+) Arbitrary File Upload via handle_folders_file_uploadEPSS 3.3%CVE-2021-37701HIGHArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksEPSS 3.3%CVE-2023-42033HIGHVisualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution VulnerabilityEPSS 3.3%CVE-2024-53582HIGHAn issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory travEPSS 3.3%CVE-2023-38951CRITICALZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arbitrary files on the EPSS 3.3%