Fallos del tipo CWE-22

6046 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2020-26071HIGHCisco SD-WAN vEdge Arbitrary File Creation VulnerabilityEPSS 0.2%CVE-2026-43965MEDIUMPath Traversal in build/packages/packages.toml Allows Arbitrary Directory DeletionEPSS 0.2%CVE-2026-54785MEDIUMgemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline modeEPSS 0.2%CVE-2026-42881HIGHSTIGQter: Arbitrary File Write leading to Local Code Execution via Export HTMLEPSS 0.2%CVE-2026-28915HIGHA parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.7,EPSS 0.2%CVE-2026-64790HIGHA path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 2EPSS 0.2%CVE-2026-6940MEDIUMradare2 < 6.1.4 Project Deletion Path Traversal Directory DeletionEPSS 0.2%CVE-2026-28518HIGHOpenViking .ovpack Import ZIP Slip Path TraversalEPSS 0.2%CVE-2026-34447MEDIUMONNX: External Data Symlink TraversalEPSS 0.2%CVE-2026-46671MEDIUMRust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directoryEPSS 0.2%CVE-2026-70383HIGHArbitrary file overwrite vulnerability in DigiDoc4 clientEPSS 0.2%CVE-2026-63328MEDIUMTrivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File WriteEPSS 0.2%CVE-2026-26058MEDIUMZulip: Path Traversal in ImportEPSS 0.2%CVE-2026-55062HIGHuniget: Path Traversal in Hook Files - Directory Escape VulnerabilityEPSS 0.2%CVE-2026-31802HIGHnode-tar Symlink Path Traversal via Drive-Relative LinkpathEPSS 0.2%CVE-2025-44021LOWOpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via theEPSS 0.2%CVE-2026-89038MEDIUMVerizon Cloud for Android < 26.7.10 Path Traversal via OneTouchUploadActivityEPSS 0.2%CVE-2026-24846MEDIUMmalcontent's archive extraction could write outside extraction directoryEPSS 0.2%CVE-2026-58460HIGHreact-native-receive-sharing-intent Path Traversal via _display_nameEPSS 0.2%CVE-2026-24843HIGHmelange QEMU runner could write files outside workspace directoryEPSS 0.2%