Fallos del tipo CWE-24

119 resultados

Travessia de diretórios com caminho relativo

A aplicação aceita entrada do usuário para construir caminhos de arquivo sem validar adequadamente sequências como '../', permitindo que um atacante navegue para fora do diretório esperado e acesse arquivos sensíveis do sistema. O perigo está em confiar na entrada sem sanitização, expondo arquivos que não deveriam ser acessíveis.

Ejemplo

Um site permite download de arquivos: GET /download?file=relatorio.pdf funciona, mas GET /download?file=../../../etc/passwd lê o arquivo de senhas do sistema, já que o caminho relativo não foi filtrado.

Cómo mitigar

Valide e canonicalize caminhos antes do acesso (converta ../relativo para absoluto), use listas brancas de arquivos permitidos, e confine acessos a um diretório raiz específico. Em linguagens modernas, use APIs seguras que não resolvem '..' em caminhos.

CVE-2026-33431MEDIUMRoxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version ViewerEPSS 0.4%CVE-2022-1743MEDIUM2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24EPSS 0.4%CVE-2025-56760MEDIUMWhen Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path travEPSS 0.3%CVE-2026-73573LOWIn Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality dEPSS 0.3%CVE-2026-21436MEDIUMeopkg has Path Traversal: '../filedir' vulnerabilityEPSS 0.3%CVE-2025-68430MEDIUMCVAT vulnerable to directory traversal via mounted share listingEPSS 0.3%CVE-2026-40318HIGHSiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`EPSS 0.3%CVE-2026-76353MEDIUMPath Traversal through Knowledge Bundle Replication in Splunk EnterpriseEPSS 0.3%CVE-2025-61188MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files witEPSS 0.3%CVE-2025-61189MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerabilitEPSS 0.3%CVE-2026-66140HIGHExim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because argumentsEPSS 0.3%CVE-2025-13199MEDIUMcode-projects Email Logging Interface signup.cpp path traversalEPSS 0.3%CVE-2023-20166MEDIUMCisco Identity Services Engine Path Traversal VulnerabilitiesEPSS 0.2%CVE-2026-22810HIGHJoplin: Path traversal in OneNote importer allows overwriting arbitrary filesEPSS 0.2%CVE-2026-41082HIGHIn OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.EPSS 0.2%CVE-2025-46646MEDIUMIn Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of EPSS 0.2%CVE-2025-26427MEDIUMIn multiple locations, there is a possible Android/data access due to a path traversal error. This could lead to local escalation of privileEPSS 0.1%CVE-2025-70819MEDIUMZettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../EPSS 0.1%CVE-2026-28538MEDIUMPath traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availabiEPSS 0.1%