Fallos del tipo CWE-24

128 resultados

Travessia de diretórios com caminho relativo

A aplicação aceita entrada do usuário para construir caminhos de arquivo sem validar adequadamente sequências como '../', permitindo que um atacante navegue para fora do diretório esperado e acesse arquivos sensíveis do sistema. O perigo está em confiar na entrada sem sanitização, expondo arquivos que não deveriam ser acessíveis.

Ejemplo

Um site permite download de arquivos: GET /download?file=relatorio.pdf funciona, mas GET /download?file=../../../etc/passwd lê o arquivo de senhas do sistema, já que o caminho relativo não foi filtrado.

Cómo mitigar

Valide e canonicalize caminhos antes do acesso (converta ../relativo para absoluto), use listas brancas de arquivos permitidos, e confine acessos a um diretório raiz específico. Em linguagens modernas, use APIs seguras que não resolvem '..' em caminhos.

CVE-2024-37403MEDIUMIvanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to properly sanitize fileEPSS 0.5%CVE-2026-73573LOWIn Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality dEPSS 0.5%CVE-2026-66903MEDIUMApache OFBiz: Authenticated Path Traversal in Catalog Image ManagementEPSS 0.4%CVE-2026-46687HIGHEmlog Local File Inclusion (LFI)EPSS 0.4%CVE-2025-57563MEDIUMA path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files.EPSS 0.4%CVE-2026-44942MEDIUMlibzypp .repo files can have an optional path which can lead to path traversal attacksEPSS 0.4%CVE-2026-49103CRITICALWebmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxeEPSS 0.4%CVE-2022-1743MEDIUM2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24EPSS 0.4%CVE-2026-33431MEDIUMRoxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version ViewerEPSS 0.4%CVE-2026-66140HIGHExim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because argumentsEPSS 0.4%CVE-2026-76353MEDIUMPath Traversal through Knowledge Bundle Replication in Splunk EnterpriseEPSS 0.4%CVE-2026-92533HIGHPath Traversal in BugTracker.NETEPSS 0.4%CVE-2025-56760MEDIUMWhen Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path travEPSS 0.4%CVE-2026-40318HIGHSiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`EPSS 0.3%CVE-2025-68430MEDIUMCVAT vulnerable to directory traversal via mounted share listingEPSS 0.3%CVE-2026-21436MEDIUMeopkg has Path Traversal: '../filedir' vulnerabilityEPSS 0.3%CVE-2025-13199MEDIUMcode-projects Email Logging Interface signup.cpp path traversalEPSS 0.3%CVE-2025-61188MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files witEPSS 0.3%CVE-2025-61189MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerabilitEPSS 0.3%CVE-2023-20166MEDIUMCisco Identity Services Engine Path Traversal VulnerabilitiesEPSS 0.2%