Falhas do tipo CWE-22

6.630 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2024-49082MEDIUMWindows File Explorer Information Disclosure VulnerabilityEPSS 1.5%CVE-2022-27620MEDIUMImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server befoEPSS 1.5%CVE-2026-44225CRITICALPulpy: Incomplete filesystem sandbox in pulpy.fs bridge allows packaged web apps to read arbitrary user filesEPSS 1.5%CVE-2021-37317CRITICALDirectory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers toEPSS 1.5%CVE-2026-66914CRITICALJoomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1EPSS 1.5%CVE-2024-27081HIGHESPHome remote code execution via arbitrary file writeEPSS 1.5%CVE-2024-7776HIGHArbitrary File Overwrite in onnx/onnxEPSS 1.5%CVE-2010-0481MEDIUMThe kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate aEPSS 1.5%CVE-2020-15230HIGHArbitrary file read un VaporEPSS 1.5%CVE-2019-15596—A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within tEPSS 1.5%CVE-2025-66262CRITICALArbitrary File Overwrite via Tar Extraction Path TraversalEPSS 1.5%CVE-2020-13377HIGHThe web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attackerEPSS 1.5%CVE-2026-5489MEDIUMDriveLock Directory Traversal Information Disclosure VulnerabilityEPSS 1.5%CVE-2024-4346CRITICALStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File DeletionEPSS 1.5%CVE-2020-12147MEDIUMUnauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.EPSS 1.5%CVE-2024-12866HIGHLocal File Inclusion in netease-youdao/qanythingEPSS 1.5%CVE-2026-65700CRITICALh2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files APIEPSS 1.5%CVE-2013-10063MEDIUMNetgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GETEPSS 1.5%CVE-2025-66480CRITICALWildfire has Arbitrary File Upload via Directory Traversal in UploadFileActionEPSS 1.5%CVE-2024-23474HIGHSolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure VulnerabilityEPSS 1.5%