Fallos del tipo CWE-22

5865 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-30958HIGHOneUptime: Path Traversal — Arbitrary File Read (No Auth)EPSS 1.2%CVE-2026-91771HIGHWeights & Biases wandb before 0.29.0 Path Traversal via File DownloadEPSS 1.2%CVE-2024-42501HIGHAuthenticated Path Traversal Vulnerability Leads to a Remote Command Execution (RCE)EPSS 1.2%CVE-2023-32137MEDIUMD-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure VulnerabilityEPSS 1.2%CVE-2021-40357—A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Workspace V5.0 (All versEPSS 1.2%CVE-2010-20109HIGHBarracuda Spam & Virus Firewall "locale" Path TraversalEPSS 1.2%CVE-2026-14487CRITICALSimple Coherent Form <= 2.4.13 - Unauthenticated Arbitrary File Deletion via 'id' ParameterEPSS 1.2%CVE-2023-24057HIGHHL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal fEPSS 1.2%CVE-2026-9725CRITICALPrintcart Web to Print Product Designer for WooCommerce <= 2.5.2 - Unauthenticated Arbitrary File DeletionEPSS 1.2%CVE-2022-35920HIGHImproper Limitation of a Pathname to a Restricted Directory in sanicEPSS 1.2%CVE-2022-40199LOWDirectory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a rEPSS 1.2%CVE-2024-8524HIGHDirectory Traversal in modelscope/agentscopeEPSS 1.2%CVE-2020-5221MEDIUMDirectory Traversal (Chroot Escape) vulnerability in uftpdEPSS 1.2%CVE-2022-21693MEDIUMPath traversal in OnionshareEPSS 1.2%CVE-2024-23671HIGHA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3,EPSS 1.2%CVE-2026-6057CRITICALUnauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code ExecutionEPSS 1.2%CVE-2024-24482CRITICALAprktool before 2.9.3 on Windows allows ../ and /.. directory traversal.EPSS 1.2%CVE-2022-22679MEDIUMImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskSEPSS 1.2%CVE-2025-46565MEDIUMVite's server.fs.deny bypassed with /. for files under project rootEPSS 1.2%CVE-2022-41418HIGHAn issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute aEPSS 1.2%