Fallos del tipo CWE-22

6630 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2018-3766—Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.EPSS 1.9%CVE-2020-26299MEDIUMFile System Bounds EscapeEPSS 1.9%CVE-2015-10134HIGHSimple Backup <= 2.7.10 - Arbitrary File Download via Path TraversalEPSS 1.9%CVE-2022-37934MEDIUMA potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotelEPSS 1.9%CVE-2025-30005HIGHXorcom CompletePBX <= 5.2.35 Authenticated Path Traversal & File DeletionEPSS 1.9%CVE-2022-41154HIGHA directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specialEPSS 1.9%CVE-2025-3485HIGHAllegra extractFileFromZip Directory Traversal Remote Code Execution VulnerabilityEPSS 1.9%CVE-2018-3734—stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read conEPSS 1.9%CVE-2024-53586MEDIUMAn issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. BEPSS 1.9%CVE-2018-4861—A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/EPSS 1.9%CVE-2020-15239LOWDirectory Traversal in xmpp-http-uploadEPSS 1.9%CVE-2024-32258HIGHThe network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authenEPSS 1.9%CVE-2024-3571MEDIUMPath Traversal in langchain-ai/langchainEPSS 1.9%CVE-2021-43815MEDIUMGrafana directory traversal for `.cvs` filesEPSS 1.9%CVE-2024-22779HIGHDirectory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote attacker to execute arbitrary code via the loEPSS 1.9%CVE-2021-28172HIGHVangene deltaFlow E-platform - Path TraversalEPSS 1.9%CVE-2026-1557HIGHWP Responsive Images <= 1.0 - Unauthenticated Path Traversal to Arbitrary File Read via srcEPSS 1.9%CVE-2021-37712HIGHArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksEPSS 1.9%CVE-2020-35460MEDIUMcommon/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writinEPSS 1.9%CVE-2022-39040HIGHaEnrich a+HRD - Path TraversalEPSS 1.9%