Fallos del tipo CWE-22

5839 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-25592CRITICALSemantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDKEPSS 2.5%CVE-2026-75604CRITICALNext.js: Unauthenticated Remote Code Execution on windows-hosted serversEPSS 2.5%CVE-2020-14490HIGHOpenClinic GAEPSS 2.5%CVE-2021-39180HIGHPath Traversal in Archive Handling Leading to Code ExecutionEPSS 2.4%CVE-2017-16605—This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.EPSS 2.4%CVE-2021-22028—In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to infEPSS 2.4%CVE-2026-93616CRITICALDirectory Traversal and File upload allows execution of arbitrary script on the Management ServerEPSS 2.4%KEVCVE-2018-3732—resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special chEPSS 2.4%CVE-2023-3961CRITICALSamba: smbd allows client access to unix domain sockets on the file system as rootEPSS 2.4%CVE-2017-16600—This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 builEPSS 2.4%CVE-2025-24963MEDIUMBrowser mode serves arbitrary files in vitestEPSS 2.4%CVE-2024-0520CRITICALRemote Code Execution due to Full Controlled File Write in mlflow/mlflowEPSS 2.4%CVE-2021-21894CRITICALA directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specEPSS 2.4%CVE-2026-59867HIGHKiota: Generation-time SSRF + remote/local file inclusion via unrestricted $refEPSS 2.4%CVE-2016-7063—A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation.EPSS 2.4%CVE-2025-14675HIGHMeta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File DeletionEPSS 2.4%CVE-2023-42129MEDIUMA10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure VulnerabilityEPSS 2.4%CVE-2026-54066HIGHSiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)EPSS 2.4%CVE-2021-21880HIGHA directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-EPSS 2.4%CVE-2021-21885HIGHA directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially crafEPSS 2.4%