Fallos del tipo CWE-23

509 resultados

Travessia de diretório via normalização de caminho inadequada

A aplicação constrói caminhos de arquivo usando entrada do usuário sem neutralizar sequências como '..' (parent directory), permitindo acesso a arquivos fora do diretório restrito pretendido. Mesmo com validações parciais, um atacante consegue contorná-las usando variações de codificação ou normalização diferida.

Ejemplo

Um sistema de gerenciamento de documentos valida se o arquivo solicitado começa com '/uploads/', mas não normaliza '..' antes da validação. Requisição GET /document?file=/uploads/../../../etc/passwd permite ler /etc/passwd. O '..' é processado após a validação passar.

Cómo mitigar

Normalize o caminho completo (resolver symlinks, '..' e '.') ANTES de qualquer validação, depois verifique se o resultado está dentro do diretório permitido. Use APIs seguras da linguagem (realpath em C, Path.getCanonicalPath em Java, Path.resolve e comparação em Python) e sempre implemente validação com whitelist, não blacklist de caracteres.

CVE-2023-3512HIGHRelative path traversal in Setelsa Security ConacWin CBEPSS 0.6%CVE-2025-9639HIGHAi3｜QbiCRMGateway - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2023-23778MEDIUMA relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions mEPSS 0.6%CVE-2025-1584MEDIUMopensolon Solon StaticMappings.java path traversalEPSS 0.6%CVE-2024-45731HIGHPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate diskEPSS 0.6%CVE-2026-81849HIGHPath traversal in the aws:downloadContent plugin in amazon-ssm-agentEPSS 0.6%CVE-2025-31493MEDIUMPath traversal of collection names during file system lookupEPSS 0.6%CVE-2025-30207LOWKirby vulnerable to path traversal in the router for PHP's built-in serverEPSS 0.6%CVE-2026-8073HIGHKirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIPEPSS 0.6%CVE-2025-2056HIGHWP Ghost <= 5.4.01 - Unauthenticated Limited File ReadEPSS 0.6%CVE-2023-23784MEDIUMA relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versionsEPSS 0.6%CVE-2026-50426MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-50453HIGHWordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-6433HIGHLocal File Inclusion in stitionai/devikaEPSS 0.6%CVE-2024-34712MEDIUMOceanic allows unsanitized user input to lead to path traversal in URLsEPSS 0.6%CVE-2026-8100HIGHImpact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific condEPSS 0.5%CVE-2025-46433MEDIUMIn JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possibleEPSS 0.5%CVE-2025-7146HIGHJhenggao iPublish System - Arbitrary File Reading through Path TraversalEPSS 0.5%CVE-2026-78254HIGHApache Ant: Path traversal in ftp and scp tasks allows arbitrary file writeEPSS 0.5%CVE-2026-57871HIGHRelative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. EPSS 0.5%