Falhas do tipo CWE-22

5.808 resultados

Travessia de diretório (Path Traversal)

A aplicação constrói caminhos de arquivo usando entrada do usuário sem validar adequadamente, permitindo que caracteres especiais como '../' façam o caminho "sair" do diretório permitido e acessar arquivos fora da zona restrita. Isso expõe dados sensíveis ou permite manipulação de arquivos críticos do sistema.

Exemplo

Um site permite download de documentos via URL como /download?file=relatorio.pdf, mas não valida o parâmetro. Um atacante usa /download?file=../../etc/passwd para ler o arquivo de senhas do servidor, ou /download?file=../../configuracao.db para acessar a base de dados da aplicação.

Como mitigar

Valide e normalize todos os caminhos de entrada (use funções nativas como realpath ou canonicalize), implemente uma whitelist de arquivos permitidos em vez de bloquear padrões perigosos, e configure permissões de arquivo restritivas no SO. Melhor ainda: nunca construa caminhos a partir de entrada do usuário — use índices ou IDs mapeados internamente.

CVE-2024-12849HIGHError Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File ReadEPSS 46.9%CVE-2023-49294MEDIUMAsterisk Path Traversal vulnerabilityEPSS 45.6%CVE-2022-38424HIGHAdobe ColdFusion Application Server Directory Traversal Arbitrary file system writeEPSS 45.2%CVE-2022-38423MEDIUMAdobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityEPSS 45.0%CVE-2023-37474HIGHPath traversal in copypartyEPSS 44.9%CVE-2022-38422HIGHAdobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityEPSS 44.3%CVE-2018-10860MEDIUMperl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitizeEPSS 43.4%CVE-2026-48282CRITICALColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 42.4%CVE-2024-12105MEDIUMWhatsUp Gold - SnmpExtendedActiveMonitor path traversalEPSS 42.4%CVE-2009-1936CRITICAL_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows reEPSS 42.2%CVE-2022-21999HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 41.7%KEVCVE-2023-34129—Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenEPSS 41.2%CVE-2021-22719—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and EPSS 40.6%CVE-2015-0666HIGHDirectory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attaEPSS 40.4%KEVCVE-2023-36460CRITICALMastodon vulnerable to arbitrary file creation through media attachmentsEPSS 40.1%CVE-2025-37098HIGHA path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.EPSS 40.0%CVE-2023-51364HIGHQTS, QuTS hero, QuTScloudEPSS 39.7%CVE-2023-32235HIGHGhost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directoEPSS 39.1%CVE-2021-22717—A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and EPSS 38.9%CVE-2023-5399CRITICAL A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tamperinEPSS 38.5%