Fallos del tipo CWE-22

5839 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2022-20719MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 2.7%CVE-2022-40443MEDIUMAn absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /oEPSS 2.7%CVE-2021-1385MEDIUMCisco IOx Application Environment Path Traversal VulnerabilityEPSS 2.7%CVE-2026-8713CRITICALAvada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry ValueEPSS 2.7%CVE-2020-10696HIGHA path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a maliciousEPSS 2.7%CVE-2020-3401MEDIUMCisco SD-WAN vManage Software Path Traversal VulnerabilityEPSS 2.6%CVE-2020-3381HIGHCisco SD-WAN vManage Software Directory Traversal VulnerabilityEPSS 2.6%CVE-2020-36939HIGHCassandra Web 0.5.0 - Remote File ReadEPSS 2.6%CVE-2021-24375—Motor theme < 3.1.0 - Local File InclusionEPSS 2.6%CVE-2018-14654MEDIUMThe Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to moEPSS 2.6%CVE-2022-2463MEDIUMISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22EPSS 2.6%CVE-2020-3440MEDIUMCisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite VulnerabilityEPSS 2.6%CVE-2012-10048HIGHZenoss 3.x showDaemonXMLConfig Command ExecutionEPSS 2.6%CVE-2023-27648CRITICALDirectory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary cEPSS 2.6%CVE-2024-36527MEDIUMpuppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol EPSS 2.6%CVE-2022-40701MEDIUMA directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speciallyEPSS 2.6%CVE-2022-3361MEDIUMUltimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via ShortcodesEPSS 2.6%CVE-2019-5484—Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackeEPSS 2.6%CVE-2022-39261HIGHTwig may load a template outside a configured directory when using the filesystem loaderEPSS 2.6%CVE-2018-19003—GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All veEPSS 2.6%