Fallos del tipo CWE-22

5856 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2017-3188—The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversalEPSS 2.8%CVE-2019-25213CRITICALAdvanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File ReadEPSS 2.8%CVE-2017-20184HIGHCarlo Gavazzi Powersoft prone to Path TraversalEPSS 2.8%CVE-2019-5624HIGHRapid7 Metasploit Framework Zip Import Directory TraversalEPSS 2.8%CVE-2019-10182HIGHIt was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files. An attacker could tEPSS 2.7%CVE-2026-9290HIGHWP User Manager <= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query ParameterEPSS 2.7%CVE-2025-24786CRITICALPath traversal opening Sqlite3 database in WhoDBEPSS 2.7%CVE-2020-37088HIGHSchool ERP Pro 1.0 - Arbitrary File ReadEPSS 2.7%CVE-2023-5142LOWH3C ER6300G2 Config File userLogin.asp path traversalEPSS 2.7%CVE-2014-0751—GE Proficy HMI/SCADA Path TraversalEPSS 2.7%CVE-2024-1483HIGHPath Traversal Vulnerability in mlflow/mlflowEPSS 2.7%CVE-2022-20719MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 2.7%CVE-2022-40443MEDIUMAn absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /oEPSS 2.7%CVE-2021-1385MEDIUMCisco IOx Application Environment Path Traversal VulnerabilityEPSS 2.7%CVE-2026-8713CRITICALAvada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry ValueEPSS 2.7%CVE-2020-10696HIGHA path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a maliciousEPSS 2.7%CVE-2020-3401MEDIUMCisco SD-WAN vManage Software Path Traversal VulnerabilityEPSS 2.6%CVE-2020-3381HIGHCisco SD-WAN vManage Software Directory Traversal VulnerabilityEPSS 2.6%CVE-2021-24375—Motor theme < 3.1.0 - Local File InclusionEPSS 2.6%CVE-2018-14654MEDIUMThe Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to moEPSS 2.6%