Fallos del tipo CWE-22

5863 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2025-24494HIGHKeysight Ixia Vision Product Family Path TraversalEPSS 1.2%CVE-2024-21891HIGHNode.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-dEPSS 1.2%CVE-2022-40713MEDIUMAn issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file pEPSS 1.2%CVE-2024-33369HIGHDirectory Traversal vulnerability in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary code via the getFileEPSS 1.2%CVE-2023-23907HIGHA directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network requestEPSS 1.2%CVE-2021-3916MEDIUMPath Traversal in bookstackapp/bookstackEPSS 1.2%CVE-2026-15006HIGHBit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File FieldEPSS 1.2%CVE-2021-41152HIGHPath Traversal in Folder Component Leading to Local File InclusionEPSS 1.2%CVE-2023-53962HIGHSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File WriteEPSS 1.2%CVE-2022-20816MEDIUMCisco Unified Communications Manager Arbitrary File Deletion VulnerabilityEPSS 1.2%CVE-2024-5154HIGHCri-o: malicious container can create symlink on hostEPSS 1.2%CVE-2024-4442CRITICALSalon booking system <= 9.9 - Unauthenticated Arbitrary File DeletionEPSS 1.2%CVE-2025-29660CRITICALA vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789. This service lacks EPSS 1.2%CVE-2024-1358HIGHElementor Addon Elements <= 1.12.12 - Directory Traversal to Local File InclusionEPSS 1.2%CVE-2026-3464HIGHWP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_fileEPSS 1.2%CVE-2023-26691HIGHDirectory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when instEPSS 1.2%CVE-2024-21852HIGHRapid SCADA Path TraversalEPSS 1.2%CVE-2021-0231MEDIUMJunos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.EPSS 1.2%CVE-2023-35016MEDIUMIBM Security Verify Governance path traversalEPSS 1.2%CVE-2023-23314HIGHAn arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted EPSS 1.2%