Fallos del tipo CWE-22

5839 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2023-35187HIGHSolarWinds Access Rights Manager Directory Traversal Remote Code Execution VulnerabilityEPSS 3.0%CVE-2026-48313CRITICALColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 3.0%CVE-2026-29059MEDIUMWindmill: SUPERADMIN_SECRET (rarely used) can be accessed publiclyEPSS 2.9%CVE-2024-7262CRITICALArbitrary Code Execution in WPS OfficeEPSS 2.9%KEVCVE-2021-22651—When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot NEPSS 2.9%CVE-2024-11667HIGHA directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX seriEPSS 2.9%KEVCVE-2024-23467CRITICALSolarWinds Access Rights Manager Directory Traversal Remote Code Execution VulnerabilityEPSS 2.9%CVE-2020-27859HIGHThis vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. AuthenticEPSS 2.9%CVE-2014-125125HIGHA10 Networks AX Loadbalancer Path TraversalEPSS 2.9%CVE-2024-31851HIGHA path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which coulEPSS 2.9%CVE-2024-39903HIGHLocal File Inclusion in SolaraEPSS 2.9%CVE-2018-0405—Cisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal VulnerabilityEPSS 2.9%CVE-2020-26285HIGHWidget instances allows a hacker to inject an executable file on the server on OpenMageEPSS 2.9%CVE-2023-40514MEDIUMLG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure VulnerabilityEPSS 2.9%CVE-2023-40512MEDIUMLG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure VulnerabilityEPSS 2.9%CVE-2023-40513MEDIUMLG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure VulnerabilityEPSS 2.9%CVE-2025-32820HIGHA vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make anEPSS 2.9%CVE-2021-47795HIGHGeoVision Geowebserver 5.3.3 - Local FIle InclusionEPSS 2.9%CVE-2026-9282HIGHW3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' ParameterEPSS 2.9%CVE-2021-27471HIGHRockwell Automation Connected Components Workbench Path TraversalEPSS 2.9%