Fallos del tipo CWE-22

6629 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2022-44006CRITICALAn issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames, an externally reacEPSS 2.1%CVE-2026-65919HIGHMeshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownloadEPSS 2.1%CVE-2022-41158HIGHeyoom builder Remote Code Execution VulnerabilityEPSS 2.1%CVE-2024-23475CRITICALSolarWinds Access Rights Manager Directory Traversal and Information Disclosure VulnerabilityEPSS 2.1%CVE-2023-50233HIGHInductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution VulnerabilityEPSS 2.1%CVE-2010-10012HIGHhttpdASM 0.92 Path TraversalEPSS 2.1%CVE-2022-31473MEDIUMBIG-IP APM Appliance mode vulnerability CVE-2022-31473EPSS 2.1%CVE-2013-10062MEDIUMLinksys Routers apply.cgi Path TraversalEPSS 2.1%CVE-2022-32287HIGHApache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archivesEPSS 2.1%CVE-2023-34478CRITICALApache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.EPSS 2.1%CVE-2022-24840CRITICALImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in django-s3fileEPSS 2.1%CVE-2026-26217CRITICALCrawl4AI < 0.8.0 Docker API Local File Inclusion via file URL HandlingEPSS 2.1%CVE-2023-52332HIGHAllegra serveMathJaxLibraries Directory Traversal Information Disclosure VulnerabilityEPSS 2.1%CVE-2007-3967HIGHDirectory traversal vulnerability in index.php in PHP Directory Lister (dirLIST) before 0.1.1 allows remote attackers to list the contents oEPSS 2.1%CVE-2023-40508HIGHLG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion VulnerabilityEPSS 2.0%CVE-2023-40499HIGHLG Simple Editor mkdir Directory Traversal Arbitrary File Deletion VulnerabilityEPSS 2.0%CVE-2023-40509HIGHLG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion VulnerabilityEPSS 2.0%CVE-2026-18274HIGHHeimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution VulnerabilityEPSS 2.0%CVE-2021-43836HIGHPHP file inclusion in the Sulu admin panelEPSS 2.0%CVE-2020-15229HIGHPath traversal and files overwrite with unsquashfsEPSS 2.0%