Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2025-58760HIGHTautulli vulnerable to Unauthenticated Path Traversal in `/image` endpointEPSS 0.6%CVE-2025-0822MEDIUMBit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID ParameterEPSS 0.6%CVE-2023-3701CRITICALRelative path traversal in Aqua eSolutionsEPSS 0.6%CVE-2023-42456LOWsudo-rs Session File Relative Path Traversal vulnerabilityEPSS 0.6%CVE-2025-32017HIGHUmbraco has a Management API Vulnerability to Path Traversal With Authenticated UsersEPSS 0.6%CVE-2026-63509CRITICALMicrosoft Fabric Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2022-34836MEDIUMABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlEPSS 0.6%CVE-2025-58456HIGHAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.6%CVE-2025-54317HIGHAn issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creatEPSS 0.6%CVE-2025-12097HIGHRelative Path Traversal Vulnerability in NI System Web ServerEPSS 0.6%CVE-2026-76424HIGHCisco ISE Arbitrary File Access VulnerabilityEPSS 0.6%CVE-2025-3365CRITICALRelative Path Traversal in OnlineSuiteEPSS 0.6%CVE-2025-58078HIGHAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.6%CVE-2025-58429HIGHAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.6%CVE-2025-15015HIGHRagic｜Enterprise Cloud Database - Arbitrary File ReadEPSS 0.6%CVE-2024-3122MEDIUMCHANGING Mobile One Time Password - Arbitrary File ReadingEPSS 0.6%CVE-2022-42892MEDIUMA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service usiEPSS 0.6%CVE-2025-67366HIGH@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of filesystem-mcp containsEPSS 0.6%CVE-2025-58752LOWVite's `server.fs` settings were not applied to HTML filesEPSS 0.6%CVE-2024-0335HIGHMalformed Packet HandlingEPSS 0.6%