Fallos del tipo CWE-24

113 resultados

Travessia de diretórios com caminho relativo

A aplicação aceita entrada do usuário para construir caminhos de arquivo sem validar adequadamente sequências como '../', permitindo que um atacante navegue para fora do diretório esperado e acesse arquivos sensíveis do sistema. O perigo está em confiar na entrada sem sanitização, expondo arquivos que não deveriam ser acessíveis.

Ejemplo

Um site permite download de arquivos: GET /download?file=relatorio.pdf funciona, mas GET /download?file=../../../etc/passwd lê o arquivo de senhas do sistema, já que o caminho relativo não foi filtrado.

Cómo mitigar

Valide e canonicalize caminhos antes do acesso (converta ../relativo para absoluto), use listas brancas de arquivos permitidos, e confine acessos a um diretório raiz específico. Em linguagens modernas, use APIs seguras que não resolvem '..' em caminhos.

CVE-2026-39813CRITICALA path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attackEPSS 23.1%CVE-2022-38129HIGHA path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor MEPSS 18.7%CVE-2025-60344HIGHA path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate inpuEPSS 10.3%CVE-2021-33036—Apache Hadoop Privilege escalation vulnerabilityEPSS 3.6%CVE-2023-1800HIGHsjqzhang go-fastdfs File Upload uploa upload path traversalEPSS 3.5%CVE-2024-6746MEDIUMNaiboWang EasySpider HTTP GET Request server.js path traversalEPSS 3.3%CVE-2025-54769HIGHKL-001-2025-016: Xorux LPAR2RRD File Upload Directory TraversalEPSS 3.0%CVE-2020-9708MEDIUMGHSL-2020-133: Insufficient validation of user input in resolveRepositoryPath functionEPSS 2.9%CVE-2025-59342MEDIUMesm.sh writes arbitrary files via path traversal in `X-Zone-Id` headerEPSS 2.8%CVE-2024-43035MEDIUMFonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint.EPSS 2.4%CVE-2025-47423MEDIUMPersonal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in theEPSS 2.1%CVE-2025-27920HIGHOutput Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences inEPSS 1.8%KEVCVE-2024-1459MEDIUMUndertow: directory traversal vulnerabilityEPSS 1.7%CVE-2025-59049HIGHMockoon has a Path Traversal and LFI in the static file serving endpointEPSS 1.7%CVE-2022-20656MEDIUMCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 1.6%CVE-2021-29466MEDIUMPath Traversal at Discord-Recon .recon Command PathEPSS 1.6%CVE-2024-53636MEDIUMAn arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackeEPSS 1.4%CVE-2021-21706MEDIUMZipArchive::extractTo may extract outside of destination dirEPSS 1.4%CVE-2020-8567MEDIUMKubernetes Secrets Store CSI Driver plugin directory traversalsEPSS 1.4%CVE-2025-43919MEDIUMGNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at EPSS 1.3%