Fallos del tipo CWE-23

547 resultados

Travessia de diretório via normalização de caminho inadequada

A aplicação constrói caminhos de arquivo usando entrada do usuário sem neutralizar sequências como '..' (parent directory), permitindo acesso a arquivos fora do diretório restrito pretendido. Mesmo com validações parciais, um atacante consegue contorná-las usando variações de codificação ou normalização diferida.

Ejemplo

Um sistema de gerenciamento de documentos valida se o arquivo solicitado começa com '/uploads/', mas não normaliza '..' antes da validação. Requisição GET /document?file=/uploads/../../../etc/passwd permite ler /etc/passwd. O '..' é processado após a validação passar.

Cómo mitigar

Normalize o caminho completo (resolver symlinks, '..' e '.') ANTES de qualquer validação, depois verifique se o resultado está dentro do diretório permitido. Use APIs seguras da linguagem (realpath em C, Path.getCanonicalPath em Java, Path.resolve e comparação em Python) e sempre implemente validação com whitelist, não blacklist de caracteres.

CVE-2025-46002MEDIUMAn issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanEPSS 1.1%CVE-2023-1044MEDIUMMuYuCMS index.php path traversalEPSS 1.1%CVE-2020-1904—A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directoEPSS 1.1%CVE-2022-22279—A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versionEPSS 1.1%CVE-2026-52813CRITICALGogs: Path Traversal in organization name results in RCE through Git hooksEPSS 1.1%CVE-2024-32115MEDIUMA relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged EPSS 1.1%CVE-2026-67367CRITICALA vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), EPSS 1.1%CVE-2021-32949HIGHMDT AutoSave Relative Path TraversalEPSS 1.1%CVE-2022-20913MEDIUMCisco Nexus Dashboard Arbitrary File Write VulnerabilityEPSS 1.1%CVE-2021-22674—The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and direEPSS 1.1%CVE-2020-7377HIGHRapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump moduleEPSS 1.1%CVE-2025-1599MEDIUMSourceCodester Best Church Management Software profile_crud.php path traversalEPSS 1.1%CVE-2024-9363HIGHUnauthorized File Deletion in polyaxon/polyaxonEPSS 1.1%CVE-2022-36081HIGHWikmd vulnerable to Local File Enumeration when accessing /listEPSS 1.1%CVE-2022-21808—Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions frEPSS 1.1%CVE-2023-50255CRITICALZip Path Traversal in Deepin-CompressorEPSS 1.1%CVE-2025-57403HIGHCola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the reEPSS 1.0%CVE-2026-21659HIGHJohnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File InclusionEPSS 1.0%CVE-2020-12010—Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an aEPSS 1.0%CVE-2018-12476MEDIUMobs-service-extract_file's outfilename parameter allows to write files outside of package directoryEPSS 1.0%