Falhas do tipo CWE-22

6.630 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2022-2926MEDIUMDownload Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path TraversalEPSS 1.7%CVE-2024-41936HIGHVonets WiFi Bridges Path TraversalEPSS 1.7%CVE-2020-26065MEDIUMA vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to condEPSS 1.7%CVE-2026-27018HIGHGotenberg: Chromium deny-list bypass via case-insensitive URL schemeEPSS 1.7%CVE-2020-29494HIGHDell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit thEPSS 1.7%CVE-2020-26279HIGHPath traversalEPSS 1.7%CVE-2008-3939HIGHDirectory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary filEPSS 1.7%CVE-2017-16153—gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.EPSS 1.7%CVE-2021-43795HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeriaEPSS 1.7%CVE-2026-116067HIGHPaisa before 0.7.8 Path Traversal via Editor and Sheet APIEPSS 1.7%CVE-2022-24424HIGHDell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may poEPSS 1.7%CVE-2023-2278CRITICALWP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_actionEPSS 1.7%CVE-2020-36893HIGHEibiz i-Media Server Digital Signage 3.8.0 Directory Traversal VulnerabilityEPSS 1.7%CVE-2017-16109—easyquick is a simple web server. easyquick is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by plaEPSS 1.7%CVE-2017-16222—elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placingEPSS 1.7%CVE-2017-16179—dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" EPSS 1.7%CVE-2020-6768HIGHPath Traversal in Bosch Video Management System (BVMS)EPSS 1.7%CVE-2025-4206HIGHWordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg <= 4.1.1.2 - Authenticated (Administrator+) Arbitrary File DeletionEPSS 1.7%CVE-2023-29478CRITICALBiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on thEPSS 1.7%CVE-2021-32532HIGHQSAN XEVO - Path TraversalEPSS 1.7%