Falhas do tipo CWE-22

6.562 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2021-1385MEDIUMCisco IOx Application Environment Path Traversal VulnerabilityEPSS 2.7%CVE-2026-29963HIGHHSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. EPSS 2.7%CVE-2020-3401MEDIUMCisco SD-WAN vManage Software Path Traversal VulnerabilityEPSS 2.6%CVE-2020-3381HIGHCisco SD-WAN vManage Software Directory Traversal VulnerabilityEPSS 2.6%CVE-2021-24375—Motor theme < 3.1.0 - Local File InclusionEPSS 2.6%CVE-2018-14654MEDIUMThe Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to moEPSS 2.6%CVE-2020-3440MEDIUMCisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite VulnerabilityEPSS 2.6%CVE-2026-53976CRITICALOpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace ParameterEPSS 2.6%CVE-2025-50857CRITICALZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitraEPSS 2.6%CVE-2023-27648CRITICALDirectory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary cEPSS 2.6%CVE-2024-39787CRITICALMultiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially EPSS 2.6%CVE-2024-39786CRITICALMultiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially EPSS 2.6%CVE-2023-29159HIGHDirectory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to vieEPSS 2.6%CVE-2022-29511CRITICALA directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1EPSS 2.6%CVE-2022-40701MEDIUMA directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speciallyEPSS 2.6%CVE-2019-5484—Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackeEPSS 2.6%CVE-2018-19003—GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All veEPSS 2.6%CVE-2024-45436CRITICALextractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.EPSS 2.6%CVE-2024-36527MEDIUMpuppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol EPSS 2.6%CVE-2022-3361MEDIUMUltimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via ShortcodesEPSS 2.6%