Falhas do tipo CWE-22

6.561 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2021-40525—Sieve file storage vulnerable to path traversal attacksEPSS 3.8%CVE-2025-12055HIGHUnauthenticated Local File Disclosure in MPDV Mikrolab MIP 2 / FEDRA 2 / HYDRA X Manufacturing Execution SystemEPSS 3.8%CVE-2025-71210CRITICALA vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oEPSS 3.8%CVE-2024-0402CRITICALImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabEPSS 3.8%CVE-2021-21879CRITICALA directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A speciallyEPSS 3.8%CVE-2024-3234CRITICALPath Traversal in gaizhenbiao/chuanhuchatgptEPSS 3.8%CVE-2025-71211CRITICALA vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oEPSS 3.8%CVE-2017-6758—A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker tEPSS 3.8%CVE-2019-1854MEDIUMCisco Expressway Series Directory Traversal VulnerabilityEPSS 3.7%CVE-2020-26285HIGHWidget instances allows a hacker to inject an executable file on the server on OpenMageEPSS 3.7%CVE-2021-40745HIGHAdobe Campaign Path Traversal Leads to Information ExposureEPSS 3.7%CVE-2022-39045HIGHA file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HEPSS 3.7%CVE-2026-7411CRITICALIn Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauEPSS 3.7%CVE-2012-10048HIGHZenoss 3.x showDaemonXMLConfig Command ExecutionEPSS 3.7%CVE-2024-10763CRITICALCampress <= 1.35 - Unauthenticated Local File InclusionEPSS 3.7%CVE-2023-0947HIGHPath Traversal in flatpressblog/flatpressEPSS 3.6%CVE-2026-2614HIGHArbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflowEPSS 3.6%CVE-2017-6652—A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitEPSS 3.6%CVE-2021-40724HIGHAdobe Acrobat Reader Android Abritrary Code Execution VulnerabilityEPSS 3.6%CVE-2024-35219HIGHOpenAPI Generator Online - Arbitrary File Read/DeleteEPSS 3.6%