Falhas do tipo CWE-22

6.630 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2022-39345CRITICALGin-vue-admin arbitrary file upload vulnerability caused by path traversalEPSS 1.8%CVE-2026-44177HIGHKirby: Pre-authentication path traversal and PHP file inclusion during user lookupEPSS 1.8%CVE-2023-44451HIGHLinux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution VulnerabilityEPSS 1.8%CVE-2023-1163MEDIUMDrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversalEPSS 1.8%CVE-2022-35918MEDIUMStreamlit directory traversal vulnerabilityEPSS 1.8%CVE-2023-29380HIGHWarpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.EPSS 1.8%CVE-2022-34822CRITICALPath traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SinEPSS 1.8%CVE-2017-16091—xtalk helps your browser talk to nodex, a simple web framework. xtalk is vulnerable to a directory traversal issue, giving an attacker accesEPSS 1.8%CVE-2020-15236HIGHDirectory Traversal in Wiki.jsEPSS 1.8%CVE-2018-16475—A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server.EPSS 1.8%CVE-2022-22931—Path traversal in Apache James 3.6.1EPSS 1.8%CVE-2026-6377HIGHPath Traversal in Next4Biz's CSM (Customer Service Management)EPSS 1.8%CVE-2024-50329HIGHPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenEPSS 1.8%CVE-2024-27984HIGHA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific tEPSS 1.8%CVE-2025-3884HIGHCloudera Hue Ace Editor Directory Traversal Information Disclosure VulnerabilityEPSS 1.8%CVE-2021-36471CRITICALDirectory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and view sensitive information via /EPSS 1.8%CVE-2022-34026HIGHICEcoder v8.1 allows attackers to execute a directory traversal.EPSS 1.8%CVE-2024-13986HIGHNagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCEEPSS 1.7%CVE-2025-69411HIGHWordPress ionCube tester plus plugin <= 1.3 - Arbitrary File Download vulnerabilityEPSS 1.7%CVE-2021-32527HIGHQSAN Storage Manager - Path Traversal-2EPSS 1.7%