Fallos del tipo CWE-22

6629 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-9778HIGHATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2026-9777HIGHATEN Unizon restoreDB Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2021-21896MEDIUMA directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).EPSS 2.2%CVE-2020-3550HIGHCisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal VulnerabilityEPSS 2.2%CVE-2021-34436—In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extEPSS 2.2%CVE-2021-22794CRITICALA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code exEPSS 2.2%CVE-2023-42819HIGHPath traversal in JumpserverEPSS 2.2%CVE-2024-21400CRITICALMicrosoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityEPSS 2.2%CVE-2022-26675HIGHaEnrich a+HRD - Path TraversalEPSS 2.2%CVE-2019-5416—A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remEPSS 2.2%CVE-2026-24486HIGHPython-Multipart has Arbitrary File Write via Non-Default ConfigurationEPSS 2.2%CVE-2023-51647HIGHAllegra saveInlineEdit Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2023-51643HIGHAllegra uploadFile Directory Traversal Remote Code Execution VulnerabilityEPSS 2.2%CVE-2022-48482HIGH3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /ElectrEPSS 2.2%CVE-2021-33353CRITICALDirectory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arEPSS 2.2%CVE-2026-54066HIGHSiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)EPSS 2.2%CVE-2016-10331—Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary fileEPSS 2.2%CVE-2026-102097HIGHKiteworks Email Protection Gateway remote code executionEPSS 2.2%CVE-2018-3733—crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malEPSS 2.2%CVE-2022-39058HIGHChanging Information Technology Inc. RAVA certificate validation system - Path TraversalEPSS 2.2%