Fallos del tipo CWE-26

17 resultados

Traversal de Diretórios

Ocorre quando a aplicação não valida adequadamente caminhos de arquivo fornecidos pelo usuário, permitindo que caracteres como '../' acessem diretórios fora do escopo permitido. Um atacante consegue ler, modificar ou deletar arquivos arbitrários no sistema, incluindo configurações sensíveis e dados de outros usuários.

Ejemplo

Uma API que retorna arquivos com `GET /download?file=relatorio.pdf` sem validação. Um atacante manda `file=../../../etc/passwd` e consegue ler o arquivo de senhas do sistema, porque a aplicação simplesmente concatena o parâmetro ao caminho base.

Cómo mitigar

Valide todo caminho de arquivo contra uma lista de permissões (whitelist), remova sequências perigosas como '../' e use APIs de sistema que isolem operações a um diretório raiz (sandboxing). Nunca confie em entrada do usuário para montar caminhos.

CVE-2024-20345MEDIUMA vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct diEPSS 2.2%CVE-2021-34762HIGHCisco Firepower Management Center Software Authenticated Directory Traversal VulnerabilityEPSS 1.9%CVE-2021-42021—A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video DEPSS 1.7%CVE-2023-50255CRITICALZip Path Traversal in Deepin-CompressorEPSS 1.1%CVE-2024-29466HIGHDirectory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.EPSS 1.0%CVE-2023-25802HIGHRoxy-WI has Path Traversal vulnerabilityEPSS 1.0%CVE-2024-28064CRITICALKiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated filEPSS 0.9%CVE-2025-25295HIGHLabel Studio has a Path Traversal Vulnerability via image FieldEPSS 0.7%CVE-2024-31551HIGHDirectory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via cEPSS 0.7%CVE-2026-42196CRITICALdjango-s3file: Relative path traversalEPSS 0.6%CVE-2024-25466HIGHDirectory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbEPSS 0.5%CVE-2024-5865HIGHArbitrary File Reading in Centrify PASEPSS 0.5%CVE-2025-53908HIGHRomM vulnerable to Authenticated Path TraversalEPSS 0.5%CVE-2026-25575HIGHNavigaTUM has a Path Traversal Vulnerability in the propose_edits functionalityEPSS 0.4%CVE-2024-5866MEDIUMArbitrary Directory Listing in Centrify PASEPSS 0.4%CVE-2022-45133MEDIUMMahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured XEPSS 0.3%CVE-2026-46747MEDIUMA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize patEPSS 0.2%