Fallos del tipo CWE-22

5839 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-24486HIGHPython-Multipart has Arbitrary File Write via Non-Default ConfigurationEPSS 2.2%CVE-2022-1721HIGHPath Traversal in WellKnownServlet in jgraph/drawioEPSS 2.2%CVE-2024-54382MEDIUMWordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerabilityEPSS 2.2%CVE-2026-9778HIGHATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2026-9777HIGHATEN Unizon restoreDB Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2021-34436—In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extEPSS 2.2%CVE-2024-12905HIGHAn Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path TraEPSS 2.2%CVE-2021-22794CRITICALA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code exEPSS 2.2%CVE-2018-3733—crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malEPSS 2.2%CVE-2022-34254HIGHAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code executionEPSS 2.2%CVE-2022-26675HIGHaEnrich a+HRD - Path TraversalEPSS 2.2%CVE-2025-13339HIGHHippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File ReadEPSS 2.2%CVE-2019-5416—A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remEPSS 2.2%CVE-2020-3550HIGHCisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal VulnerabilityEPSS 2.2%CVE-2026-24849CRITICALOpenEMR Arbitrary File Read VulnerabilityEPSS 2.2%CVE-2023-51647HIGHAllegra saveInlineEdit Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2023-51643HIGHAllegra uploadFile Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2024-21400CRITICALMicrosoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityEPSS 2.2%CVE-2023-27534HIGHA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as EPSS 2.2%CVE-2021-33353CRITICALDirectory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arEPSS 2.2%