Falhas do tipo CWE-22

6.632 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2022-43858MEDIUMIBM Navigator for i information disclosureEPSS 1.1%CVE-2021-25021—OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path TraversalEPSS 1.1%CVE-2025-6925MEDIUMDromara RuoYi-Vue-Plus Mail MailController.java path traversalEPSS 1.1%CVE-2022-43857MEDIUMIBM Navigator for i information disclosureEPSS 1.1%CVE-2021-25020—CAOS < 4.1.9 - Admin+ Arbitrary Folder Deletion via Path TraversalEPSS 1.1%CVE-2025-62522MEDIUMvite allows server.fs.deny bypass via backslash on WindowsEPSS 1.1%CVE-2020-18330CRITICALAn issue was discovered in the default configuration of ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2EPSS 1.1%CVE-2025-25997HIGHDirectory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php componenEPSS 1.1%CVE-2023-50255CRITICALZip Path Traversal in Deepin-CompressorEPSS 1.1%CVE-2025-7694MEDIUMWoffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File DeletionEPSS 1.1%CVE-2020-19279CRITICALDirectory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links.EPSS 1.1%CVE-2023-25345HIGHDirectory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the includeEPSS 1.1%CVE-2023-3329—CVE-2023-3329EPSS 1.0%CVE-2025-46120CRITICALAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.EPSS 1.0%CVE-2023-37896HIGHNuclei Path Traversal vulnerabilityEPSS 1.0%CVE-2022-27611MEDIUMImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station bEPSS 1.0%CVE-2026-42249HIGHRemote Code Execution in Ollama via Update MechanismEPSS 1.0%CVE-2021-21909MEDIUMSpecially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can proviEPSS 1.0%CVE-2026-34689HIGHAdobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 1.0%CVE-2026-48310HIGHAdobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 1.0%