Fallos del tipo CWE-22

5809 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2024-12849HIGHError Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File ReadEPSS 46.9%CVE-2023-49294MEDIUMAsterisk Path Traversal vulnerabilityEPSS 45.6%CVE-2022-38424HIGHAdobe ColdFusion Application Server Directory Traversal Arbitrary file system writeEPSS 45.2%CVE-2022-38423MEDIUMAdobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityEPSS 45.0%CVE-2023-37474HIGHPath traversal in copypartyEPSS 44.9%CVE-2022-38422HIGHAdobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityEPSS 44.3%CVE-2018-10860MEDIUMperl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitizeEPSS 43.4%CVE-2026-48282CRITICALColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 42.4%CVE-2024-12105MEDIUMWhatsUp Gold - SnmpExtendedActiveMonitor path traversalEPSS 42.4%CVE-2009-1936CRITICAL_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows reEPSS 42.2%CVE-2022-21999HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 41.7%KEVCVE-2023-34129—Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenEPSS 41.2%CVE-2021-22719—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and EPSS 40.6%CVE-2015-0666HIGHDirectory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attaEPSS 40.4%KEVCVE-2023-36460CRITICALMastodon vulnerable to arbitrary file creation through media attachmentsEPSS 40.1%CVE-2025-37098HIGHA path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.EPSS 40.0%CVE-2023-51364HIGHQTS, QuTS hero, QuTScloudEPSS 39.7%CVE-2023-32235HIGHGhost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directoEPSS 39.1%CVE-2021-22717—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and EPSS 38.9%CVE-2023-5399CRITICAL A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tamperinEPSS 38.5%