Falhas do tipo CWE-22

5.840 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2024-46446CRITICALMecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. ParameterEPSS 1.4%CVE-2021-24447—WP Image Zoom < 1.47 - Local File InclusionEPSS 1.4%CVE-2026-59863HIGHKiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRFEPSS 1.4%CVE-2023-37607HIGHDirectory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information via cEPSS 1.4%CVE-2024-13725CRITICALKeap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File InclusionEPSS 1.4%CVE-2025-7360CRITICALHT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File MoveEPSS 1.4%CVE-2018-16473—A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.EPSS 1.4%CVE-2019-1765HIGHCisco IP Phone 8800 Series Path Traversal VulnerabilityEPSS 1.4%CVE-2025-13661HIGHPath traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outsEPSS 1.4%CVE-2024-40524CRITICALDirectory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\application.py EPSS 1.4%CVE-2021-24692—Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path TraversalEPSS 1.4%CVE-2022-32963HIGHITPison OMICARD EDM - Path Traversal-1EPSS 1.4%CVE-2022-35216HIGHITPison OMICARD EDM - Use of Hard-coded CredentialsEPSS 1.4%CVE-2026-67918HIGHDirectory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath fuEPSS 1.4%CVE-2025-44137HIGHMapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for deliveriEPSS 1.4%CVE-2024-24042HIGHDirectory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirEPSS 1.4%CVE-2024-52293HIGHCraft has a Potential Remote Code Execution via missing path normalization & Twig SSTIEPSS 1.4%CVE-2025-54794HIGHClaude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file accessEPSS 1.4%CVE-2026-39981HIGHAGiXT has a Path Traversal in safe_join()EPSS 1.4%CVE-2026-48319CRITICALColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 1.4%