Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2023-3512HIGHRelative path traversal in Setelsa Security ConacWin CBEPSS 0.6%CVE-2025-9639HIGHAi3｜QbiCRMGateway - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2023-23778MEDIUMA relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions mEPSS 0.6%CVE-2025-1584MEDIUMopensolon Solon StaticMappings.java path traversalEPSS 0.6%CVE-2024-45731HIGHPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate diskEPSS 0.6%CVE-2026-81849HIGHPath traversal in the aws:downloadContent plugin in amazon-ssm-agentEPSS 0.6%CVE-2025-31493MEDIUMPath traversal of collection names during file system lookupEPSS 0.6%CVE-2025-30207LOWKirby vulnerable to path traversal in the router for PHP's built-in serverEPSS 0.6%CVE-2026-8073HIGHKirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIPEPSS 0.6%CVE-2025-2056HIGHWP Ghost <= 5.4.01 - Unauthenticated Limited File ReadEPSS 0.6%CVE-2023-23784MEDIUMA relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versionsEPSS 0.6%CVE-2026-50426MEDIUMWindows DNS Server Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-50453HIGHWordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-6433HIGHLocal File Inclusion in stitionai/devikaEPSS 0.6%CVE-2024-34712MEDIUMOceanic allows unsanitized user input to lead to path traversal in URLsEPSS 0.6%CVE-2026-8100HIGHImpact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific condEPSS 0.5%CVE-2025-46433MEDIUMIn JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possibleEPSS 0.5%CVE-2025-7146HIGHJhenggao iPublish System - Arbitrary File Reading through Path TraversalEPSS 0.5%CVE-2026-78254HIGHApache Ant: Path traversal in ftp and scp tasks allows arbitrary file writeEPSS 0.5%CVE-2026-57871HIGHRelative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. EPSS 0.5%