Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2023-6722HIGHRelative Path Traversal in RepoxEPSS 0.8%CVE-2025-0390MEDIUMGuangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversalEPSS 0.8%CVE-2025-11898HIGHFlowring Technology｜Agentflow - Arbitrary File Reading through Path TraversalEPSS 0.8%CVE-2026-15802HIGHWP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX ActionEPSS 0.8%CVE-2024-0549HIGHRelative Path Traversal in mintplex-labs/anything-llmEPSS 0.8%CVE-2024-35186HIGHgix traversal outside working tree enables arbitrary code executionEPSS 0.8%CVE-2026-67367CRITICALA vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), EPSS 0.8%CVE-2022-30300MEDIUMA relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenEPSS 0.8%CVE-2025-1086MEDIUMSafetytest Cloud-Master Server static path traversalEPSS 0.8%CVE-2026-70337HIGHMicrosoft PowerShell Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-27770HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path TraversalEPSS 0.8%CVE-2026-47287MEDIUMVisual Studio Code Tampering VulnerabilityEPSS 0.8%CVE-2021-38399HIGHHoneywell Experion PKS and ACE Controllers Relative Path TraversalEPSS 0.8%CVE-2021-37196—A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 onlEPSS 0.8%CVE-2023-3940HIGHMultiple arbitrary file reads in ZkTeco-based OEM devicesEPSS 0.8%CVE-2025-7619HIGHWellChoose｜BatchSignCS - Arbitrary File Write through Path TraversalEPSS 0.8%CVE-2025-32137MEDIUMWordPress s2Member plugin <= 250419 - Local File Inclusion vulnerabilityEPSS 0.8%CVE-2024-47769HIGHIDURAR has a Path Traversal (unauthenticated user can read sensitive data)EPSS 0.8%CVE-2024-25944MEDIUMDell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially EPSS 0.8%CVE-2024-32005HIGHLocal File Inclusion in NiceGUI leaflet componentEPSS 0.8%