Falhas do tipo CWE-22

5.839 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2021-24363—Photo Gallery < 1.5.75 - File Upload Path TraversalEPSS 1.9%CVE-2022-1000HIGHPath Traversal in prasathmani/tinyfilemanagerEPSS 1.9%CVE-2026-51134HIGHThe C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pmlEPSS 1.9%CVE-2022-37865CRITICALApache Ivy allows creating/overwriting any file on the systemEPSS 1.9%CVE-2025-11466MEDIUMAllegra DatabaseBackupBL Directory Traversal Information Disclosure VulnerabilityEPSS 1.9%CVE-2022-41154HIGHA directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specialEPSS 1.9%CVE-2021-21886MEDIUMA directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 8.9.0.0R4. A speciallEPSS 1.9%CVE-2024-53586MEDIUMAn issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. BEPSS 1.9%CVE-2020-15239LOWDirectory Traversal in xmpp-http-uploadEPSS 1.9%CVE-2024-32258HIGHThe network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authenEPSS 1.9%CVE-2022-26835MEDIUMOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior EPSS 1.9%CVE-2024-3571MEDIUMPath Traversal in langchain-ai/langchainEPSS 1.9%CVE-2021-43840MEDIUMPath traversal in message_busEPSS 1.9%CVE-2024-22779HIGHDirectory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote attacker to execute arbitrary code via the loEPSS 1.9%CVE-2025-27222HIGHTRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesnEPSS 1.9%CVE-2025-13801HIGHYoco Payments <= 3.9.0 - Unauthenticated Arbitrary File ReadEPSS 1.9%CVE-2020-35460MEDIUMcommon/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writinEPSS 1.9%CVE-2020-26299MEDIUMFile System Bounds EscapeEPSS 1.9%CVE-2025-0573MEDIUMSante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write VulnerabilityEPSS 1.9%CVE-2021-32633MEDIUMRemote Code Execution via traversal in TAL expressionsEPSS 1.9%