Fallos del tipo CWE-22

6630 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-25055HIGHn8n Arbitrary File Write on Remote Systems via SSH NodeEPSS 1.9%CVE-2021-32633MEDIUMRemote Code Execution via traversal in TAL expressionsEPSS 1.9%CVE-2023-46253CRITICALRemote code execution in SquidexEPSS 1.9%CVE-2021-22748—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow a remote codeEPSS 1.9%CVE-2024-37728HIGHArbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attackEPSS 1.9%CVE-2020-36898HIGHQiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File DeletionEPSS 1.9%CVE-2026-9776HIGHATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure VulnerabilityEPSS 1.9%CVE-2022-41956MEDIUMAutolab is vulnerable to file disclosure via remote handin featureEPSS 1.8%CVE-2026-2033HIGHMLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution VulnerabilityEPSS 1.8%CVE-2025-63414CRITICALA Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary comEPSS 1.8%CVE-2024-56331MEDIUMLocal File Inclusion (LFI) via Improper URL Handling in uptime-kuma's `Real-Browser` monitorEPSS 1.8%CVE-2022-22128CRITICALTableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could EPSS 1.8%CVE-2022-39033CRITICALSmart eVision - Path Traversal -1EPSS 1.8%CVE-2023-51645HIGHAllegra unzipFile Directory Traversal Remote Code Execution VulnerabilityEPSS 1.8%CVE-2023-51640HIGHAllegra extarctZippedFile Directory Traversal Remote Code Execution VulnerabilityEPSS 1.8%CVE-2022-21682HIGHflatpak-builder can access files outside the build directory.EPSS 1.8%CVE-2023-51646HIGHAllegra uploadSimpleFile Directory Traversal Remote Code Execution VulnerabilityEPSS 1.8%CVE-2021-22857HIGHChanGate EnterPrise Co., Ltd property management system - Directory TraversalEPSS 1.8%CVE-2017-15893—Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated useEPSS 1.8%CVE-2025-59049HIGHMockoon has a Path Traversal and LFI in the static file serving endpointEPSS 1.8%