Fallos del tipo CWE-22

5868 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2024-23673HIGHApache Sling Servlets Resolver: Malicious code execution via path traversalEPSS 1.3%CVE-2021-24689—Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File ReadEPSS 1.3%CVE-2022-38340CRITICALSafe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataEPSS 1.3%CVE-2025-67174MEDIUMA local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal EPSS 1.3%CVE-2024-5980CRITICALArbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightningEPSS 1.3%CVE-2021-35967MEDIUMLearningdigital.com, Inc. Orca HCM - Path Traversal-1EPSS 1.3%CVE-2021-24566HIGHWooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File InclusionEPSS 1.3%CVE-2022-2030MEDIUMA directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI proEPSS 1.3%CVE-2021-41151MEDIUMPath Traversal in @backstage/plugin-scaffolder-backendEPSS 1.3%CVE-2023-48389HIGHMultisuns EasyLog web+ - Path TraversalEPSS 1.3%CVE-2023-48373HIGHITPison OMICARD EDM 's SMS - Path TraversalEPSS 1.3%CVE-2023-48378HIGHSoftnext Mail SQR Expert - Path Traversal EPSS 1.3%CVE-2024-10902CRITICALArbitrary File Upload with Path Traversal in eosphoros-ai/db-gptEPSS 1.3%CVE-2023-6559HIGHMW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File DeletionEPSS 1.3%CVE-2021-20218—A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applicatioEPSS 1.3%CVE-2022-20722MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 1.3%CVE-2023-46307HIGHAn issue was discovered in server.js in etcd-browser 87ae63d75260. By supplying a /../../../ Directory Traversal input to the URL's GET requEPSS 1.3%CVE-2022-20721MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 1.3%CVE-2020-6767HIGHPath Traversal in Bosch Video Management System (BVMS)EPSS 1.3%CVE-2022-23082HIGHCureKit - Path Traversal in isFileOutsideDirEPSS 1.3%