Fallos del tipo CWE-22

5839 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2016-10331—Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary fileEPSS 2.2%CVE-2021-21896MEDIUMA directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).EPSS 2.2%CVE-2023-32322MEDIUMArbitrary file read in OmbiEPSS 2.1%CVE-2023-40055HIGHSolarWinds Network Configuration Manager Directory Traversal Remote Code Execution VulnerabilityEPSS 2.1%CVE-2023-41181MEDIUMLG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure VulnerabilityEPSS 2.1%CVE-2024-35324CRITICALDouchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.EPSS 2.1%CVE-2023-32004HIGHA vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improEPSS 2.1%CVE-2025-34126HIGHRIPS Scanner v0.54 Path TraversalEPSS 2.1%CVE-2022-30117—Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in anEPSS 2.1%CVE-2022-38451MEDIUMA directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request canEPSS 2.1%CVE-2022-20723MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 2.1%CVE-2026-29059MEDIUMWindmill: SUPERADMIN_SECRET (rarely used) can be accessed publiclyEPSS 2.1%CVE-2023-50254CRITICALDeepin Reader RCE vulnerability due to a design flawEPSS 2.1%CVE-2020-15097CRITICALPath Traversal in loklakEPSS 2.1%CVE-2017-16593—This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.7EPSS 2.1%CVE-2026-25592CRITICALSemantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDKEPSS 2.1%CVE-2023-7327HIGHOzeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File ReadEPSS 2.1%CVE-2025-27410MEDIUMPwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as adminEPSS 2.1%CVE-2024-55587HIGHpython-libarchive through 4.2.1 allows directory traversal (to create files) in extract in zip.py for ZipFile.extractall and ZipFile.extractEPSS 2.1%CVE-2010-10012HIGHhttpdASM 0.92 Path TraversalEPSS 2.1%