Fallos del tipo CWE-22

6055 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-41972MEDIUMPath traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%CVE-2026-24686MEDIUMgo-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository NamesEPSS 0.2%CVE-2025-43250MEDIUMA path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura EPSS 0.2%CVE-2024-0849MEDIUMLeanote 2.7.0 - Local File ReadEPSS 0.2%CVE-2026-47487MEDIUMNVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, wrEPSS 0.2%CVE-2022-39858HIGHPath traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write arbitrary file as FacEPSS 0.2%CVE-2026-103870MEDIUMPulp-rpm: distribution tree publish creates directories from .treeinfo idsEPSS 0.2%CVE-2024-27887MEDIUMA path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-seEPSS 0.2%CVE-2025-43206MEDIUMA parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.6, mEPSS 0.2%CVE-2026-92131MEDIUMJenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library PipelineEPSS 0.2%CVE-2026-7318MEDIUMelie mcp-project research_server.py search_papers path traversalEPSS 0.2%CVE-2022-40976MEDIUMPILZ: Multiple products affected by ZipSlipEPSS 0.2%CVE-2024-5821MEDIUMLocal File Inclusion (LFI) in stitionai/devikaEPSS 0.2%CVE-2026-29064HIGHZarf: Symlink targets in archives are not validated against destination directoryEPSS 0.2%CVE-2026-30290HIGHAn arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files EPSS 0.2%CVE-2021-27798—privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.xEPSS 0.2%CVE-2022-41667HIGHA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with lEPSS 0.2%CVE-2026-27115HIGHADB Explorer is Vulnerable to Arbitrary Directory Deletion via Command-Line ArgumentEPSS 0.2%CVE-2025-3718MEDIUMClient-side path traversal in Guardian/CMC before 25.2.0EPSS 0.2%CVE-2025-3223MEDIUMWorkstationST EGD Configuration Server Path Traversal VulnerabilityEPSS 0.2%