Fallos del tipo CWE-22

5865 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2021-28584MEDIUMMagento Commerce path traversal vulnerability in child theme store creationEPSS 1.8%CVE-2023-28408CRITICALDirectory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website orEPSS 1.8%CVE-2025-57231HIGHPath Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST RequestEPSS 1.8%CVE-2026-44177HIGHKirby: Pre-authentication path traversal and PHP file inclusion during user lookupEPSS 1.8%CVE-2023-44451HIGHLinux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution VulnerabilityEPSS 1.8%CVE-2023-1163MEDIUMDrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversalEPSS 1.8%CVE-2022-41956MEDIUMAutolab is vulnerable to file disclosure via remote handin featureEPSS 1.8%CVE-2023-29380HIGHWarpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.EPSS 1.8%CVE-2020-15236HIGHDirectory Traversal in Wiki.jsEPSS 1.8%CVE-2022-37934MEDIUMA potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotelEPSS 1.8%CVE-2018-3724—general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious EPSS 1.8%CVE-2025-59049HIGHMockoon has a Path Traversal and LFI in the static file serving endpointEPSS 1.8%CVE-2018-16475—A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server.EPSS 1.8%CVE-2022-22931—Path traversal in Apache James 3.6.1EPSS 1.8%CVE-2024-27984HIGHA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific tEPSS 1.8%CVE-2022-31483CRITICALArbitrary file write via authenticated OSDP file uploadEPSS 1.8%CVE-2021-36471CRITICALDirectory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and view sensitive information via /EPSS 1.8%CVE-2017-16153—gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.EPSS 1.8%CVE-2022-39040HIGHaEnrich a+HRD - Path TraversalEPSS 1.7%CVE-2020-36898HIGHQiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File DeletionEPSS 1.7%