Fallos del tipo CWE-22

5883 resultados

Travessia de diretório (path traversal)

A aplicação constrói caminhos de arquivo a partir de entrada do usuário sem validar adequadamente sequências como '../' ou símbolos absolutos, permitindo que um atacante acesse arquivos fora do diretório permitido. Isso expõe dados sensíveis ou permite execução não autorizada de operações no sistema de arquivos.

Ejemplo

Um sistema web que serve documentos de um diretório específico recebe a requisição 'GET /doc?file=../../etc/passwd'. Se não validar a entrada, o código resolve o caminho para fora do diretório restrito e vaza o arquivo de senhas do sistema.

Cómo mitigar

Valide caminhos usando listas brancas de nomes de arquivo permitidos, normalize caminhos (remover '../' e símbolos), use APIs que isolem automaticamente operações em diretório base (ex: chroot, sandbox), e evite concatenar entrada direta em construtores de caminhos. Teste com payloads comuns de path traversal em testes de segurança.

CVE-2026-14323HIGHPrintcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' ParametersEPSS 0.9%CVE-2026-69400CRITICALAzure Logic Apps Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2025-27718HIGHImproper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process of the USB storage fiEPSS 0.9%CVE-2016-15055HIGHJVC VN-T IP-Camera Directory Traversal via check.cgiEPSS 0.9%CVE-2024-28151MEDIUMJenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the conEPSS 0.9%CVE-2022-41712MEDIUMFrappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does nEPSS 0.9%CVE-2026-100520HIGHLaranode before 1.2.1 Path Traversal in File Manager Upload EndpointEPSS 0.9%CVE-2023-5607HIGH An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises eEPSS 0.9%CVE-2026-73040HIGHDockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory DeletionEPSS 0.9%CVE-2022-45368HIGHWordPress 1003 Mortgage Application plugin <= 1.75 - Local File InclusionEPSS 0.9%CVE-2022-4065MEDIUMcbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversalEPSS 0.9%CVE-2022-46835HIGHSailPoint IdentityIQ JavaServer File Path Traversal VulnerabilityEPSS 0.9%CVE-2023-26758HIGHSme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService.EPSS 0.9%CVE-2022-2712MEDIUMIn Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path stEPSS 0.9%CVE-2026-16139HIGHArbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code executionEPSS 0.9%CVE-2026-49119HIGHGradio < 6.16.0 Path Traversal via FileExplorer.preprocess()EPSS 0.9%CVE-2018-25312HIGHLifeSize ClearSea 3.1.4 Directory Traversal Remote Code ExecutionEPSS 0.9%CVE-2024-7926MEDIUMZZCMS about_edit.php path traversalEPSS 0.9%CVE-2024-7927MEDIUMZZCMS class.php path traversalEPSS 0.9%CVE-2024-5179HIGHCowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Local File InclusionEPSS 0.9%