Fallos del tipo CWE-22

6630 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2018-5445—A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files witEPSS 1.8%CVE-2026-5487HIGHDriveLock Directory Traversal Information Disclosure VulnerabilityEPSS 1.8%CVE-2026-5491HIGHDriveLock Directory Traversal Information Disclosure VulnerabilityEPSS 1.8%CVE-2021-47749HIGHYouPHPTube <= 7.8 - Directory TraversalEPSS 1.8%CVE-2022-31483CRITICALArbitrary file write via authenticated OSDP file uploadEPSS 1.8%CVE-2025-13801HIGHYoco Payments <= 3.9.0 - Unauthenticated Arbitrary File ReadEPSS 1.8%CVE-2024-33350CRITICALDirectory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via EPSS 1.8%CVE-2021-24638—OMGF < 4.5.4 - Unauthenticated Path Traversal in REST APIEPSS 1.8%CVE-2023-37607HIGHDirectory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information via cEPSS 1.8%CVE-2022-26884MEDIUMApache DolphinScheduler exposes files without authenticationEPSS 1.8%CVE-2018-16482—A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive informaEPSS 1.8%CVE-2014-125125HIGHA10 Networks AX Loadbalancer Path TraversalEPSS 1.8%CVE-2025-52562CRITICALConvey Panel Directory Traversal in LocaleController leading to Remote Code ExecutionEPSS 1.8%CVE-2019-19290MEDIUMA vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in the web interface of thEPSS 1.8%CVE-2019-19296MEDIUMA vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411EPSS 1.8%CVE-2020-3130MEDIUMCisco Unity Connection Directory Traversal VulnerabilityEPSS 1.8%CVE-2026-73697HIGHControl Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editorEPSS 1.8%CVE-2020-5366HIGHDell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privilegEPSS 1.8%CVE-2023-27603CRITICALApache Linkis Mangaer module engineConn material upload exists Zip Slip issueEPSS 1.8%CVE-2024-27977HIGHA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete arbitrary EPSS 1.8%