Fallos del tipo CWE-22

5867 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2021-22933—A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a mEPSS 1.4%CVE-2020-14366MEDIUMA vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resourcesEPSS 1.4%CVE-2024-46446CRITICALMecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. ParameterEPSS 1.4%CVE-2021-24447—WP Image Zoom < 1.47 - Local File InclusionEPSS 1.4%CVE-2026-59863HIGHKiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRFEPSS 1.4%CVE-2023-37607HIGHDirectory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information via cEPSS 1.4%CVE-2024-13725CRITICALKeap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File InclusionEPSS 1.4%CVE-2025-7360CRITICALHT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File MoveEPSS 1.4%CVE-2018-16473—A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.EPSS 1.4%CVE-2019-1765HIGHCisco IP Phone 8800 Series Path Traversal VulnerabilityEPSS 1.4%CVE-2025-13661HIGHPath traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outsEPSS 1.4%CVE-2025-6804HIGHMarvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-6796HIGHMarvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-6803HIGHMarvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-6799HIGHMarvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-6800HIGHMarvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-6797HIGHMarvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure VulnerabilityEPSS 1.4%CVE-2024-40524CRITICALDirectory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\application.py EPSS 1.4%CVE-2021-24692—Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path TraversalEPSS 1.4%CVE-2022-32963HIGHITPison OMICARD EDM - Path Traversal-1EPSS 1.4%