Fallos del tipo CWE-22

5839 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2021-32814HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SkytableEPSS 2.1%CVE-2026-65919HIGHMeshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownloadEPSS 2.1%CVE-2025-34076MEDIUMMicroweber CMS Authenticated Local File Inclusion via Backup APIEPSS 2.1%CVE-2024-23475CRITICALSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityEPSS 2.1%CVE-2023-50233HIGHInductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution VulnerabilityEPSS 2.1%CVE-2023-34478CRITICALApache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.EPSS 2.1%CVE-2023-5241CRITICALAI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_fileEPSS 2.1%CVE-2023-42130HIGHA10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion VulnerabilityEPSS 2.1%CVE-2023-52332HIGHAllegra serveMathJaxLibraries Directory Traversal Information Disclosure VulnerabilityEPSS 2.1%CVE-2025-34118HIGHLinknat VOS Manager Path Traversal File DisclosureEPSS 2.1%CVE-2020-26252HIGHLayout XML RCE Vulnerability in OpenMageEPSS 2.1%CVE-2024-23652CRITICALBuildKit possible host system access from mount stub cleanerEPSS 2.1%CVE-2025-41242MEDIUMCVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containersEPSS 2.1%CVE-2007-3967HIGHDirectory traversal vulnerability in index.php in PHP Directory Lister (dirLIST) before 0.1.1 allows remote attackers to list the contents oEPSS 2.1%CVE-2023-40508HIGHLG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion VulnerabilityEPSS 2.0%CVE-2023-29159HIGHDirectory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to vieEPSS 2.0%CVE-2023-40509HIGHLG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion VulnerabilityEPSS 2.0%CVE-2023-40499HIGHLG Simple Editor mkdir Directory Traversal Arbitrary File Deletion VulnerabilityEPSS 2.0%CVE-2020-15229HIGHPath traversal and files overwrite with unsquashfsEPSS 2.0%CVE-2019-16777HIGHArbitrary File Overwrite in npm CLIEPSS 2.0%