Falhas do tipo CWE-22

6.632 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2026-30940HIGHbaserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCEEPSS 1.1%CVE-2018-10917MEDIUMpulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to lEPSS 1.1%CVE-2024-12152HIGHMIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File DownloadEPSS 1.1%CVE-2024-50508HIGHWordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Download vulnerabilityEPSS 1.1%CVE-2023-26969HIGHAtropim 1.5.26 is vulnerable to Directory Traversal.EPSS 1.1%CVE-2022-36081HIGHWikmd vulnerable to Local File Enumeration when accessing /listEPSS 1.1%CVE-2026-22871HIGHGuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCEEPSS 1.1%CVE-2021-3823HIGHPath traversal vulnerability in Bitdefender GravitZone Update Server in relay modeEPSS 1.1%CVE-2024-13982HIGHSPON IP Network Intercom System rj_get_token.php Arbitrary File ReadEPSS 1.1%CVE-2024-38824CRITICALCVE-2024-38824 salt advisoryEPSS 1.1%CVE-2022-47951MEDIUMAn issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.EPSS 1.1%CVE-2020-5720—MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has wriEPSS 1.1%CVE-2022-25848HIGHDirectory TraversalEPSS 1.1%CVE-2025-7640HIGHhiWeb Export Posts <= 0.9.0.0 - Cross-Site Request Forgery to Arbitrary File DeletionEPSS 1.1%CVE-2026-14372HIGHBit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' ParameterEPSS 1.1%CVE-2024-46376CRITICALBest House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/EPSS 1.1%CVE-2017-20145MEDIUMTecrail Responsive Filemanger path traversalEPSS 1.1%CVE-2024-0818CRITICALArbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6EPSS 1.1%CVE-2023-47890HIGHpyLoad 0.5.0 is vulnerable to Unrestricted File Upload.EPSS 1.1%CVE-2026-102229MEDIUMVisual Studio Code Information Disclosure VulnerabilityEPSS 1.1%