Fallos del tipo CWE-22

6630 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-50776HIGHDirectory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information andEPSS 1.8%CVE-2026-116690HIGHMLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourceEPSS 1.8%CVE-2023-6265MEDIUMDrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversalEPSS 1.8%CVE-2017-16029—hostr is a simple web server that serves up the contents of the current directory. There is a directory traversal vulnerability in hostr 2.3EPSS 1.8%CVE-2021-43800HIGHAsset directory traversal with some storage modules on WindowsEPSS 1.8%CVE-2023-44256MEDIUMA server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 EPSS 1.8%CVE-2022-24897HIGHArbitrary filesystem write access from VelocityEPSS 1.8%CVE-2018-3712—serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in pathEPSS 1.8%CVE-2019-3556—HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, EPSS 1.8%CVE-2023-22887—Apache Airflow path traversal by authenticated userEPSS 1.8%CVE-2010-20109HIGHBarracuda Spam & Virus Firewall "locale" Path TraversalEPSS 1.8%CVE-2017-7424—A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before HoEPSS 1.8%CVE-2025-2292MEDIUMXorcom CompletePBX <= 5.2.35 Authenticated File DisclosureEPSS 1.8%CVE-2019-3737HIGHDell EMC Avamar Security Update for ADMe Web UI VulnerabilityEPSS 1.8%CVE-2024-11303HIGHPath TraversalEPSS 1.8%CVE-2021-35962HIGHTAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path TraversalEPSS 1.8%CVE-2018-0323—A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remoteEPSS 1.8%CVE-2021-28584MEDIUMMagento Commerce path traversal vulnerability in child theme store creationEPSS 1.8%CVE-2023-28408CRITICALDirectory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website orEPSS 1.8%CVE-2022-2945MEDIUMWordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory TraversalEPSS 1.8%