Fallos del tipo CWE-22

6630 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2022-2926MEDIUMDownload Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path TraversalEPSS 1.7%CVE-2024-41936HIGHVonets WiFi Bridges Path TraversalEPSS 1.7%CVE-2020-26065MEDIUMA vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to condEPSS 1.7%CVE-2026-27018HIGHGotenberg: Chromium deny-list bypass via case-insensitive URL schemeEPSS 1.7%CVE-2020-29494HIGHDell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit thEPSS 1.7%CVE-2020-26279HIGHPath traversalEPSS 1.7%CVE-2008-3939HIGHDirectory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary filEPSS 1.7%CVE-2017-16153—gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.EPSS 1.7%CVE-2021-43795HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeriaEPSS 1.7%CVE-2026-116067HIGHPaisa before 0.7.8 Path Traversal via Editor and Sheet APIEPSS 1.7%CVE-2022-24424HIGHDell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may poEPSS 1.7%CVE-2023-2278CRITICALWP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_actionEPSS 1.7%CVE-2020-36893HIGHEibiz i-Media Server Digital Signage 3.8.0 Directory Traversal VulnerabilityEPSS 1.7%CVE-2017-16109—easyquick is a simple web server. easyquick is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by plaEPSS 1.7%CVE-2017-16222—elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placingEPSS 1.7%CVE-2017-16179—dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" EPSS 1.7%CVE-2020-6768HIGHPath Traversal in Bosch Video Management System (BVMS)EPSS 1.7%CVE-2025-4206HIGHWordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg <= 4.1.1.2 - Authenticated (Administrator+) Arbitrary File DeletionEPSS 1.7%CVE-2023-29478CRITICALBiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on thEPSS 1.7%CVE-2021-32532HIGHQSAN XEVO - Path TraversalEPSS 1.7%