Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2026-7404MEDIUMgetsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversalEPSS 0.5%CVE-2025-53829HIGHownCloud 10 is vulnerable to Relative Path TraversalEPSS 0.5%CVE-2025-59776MEDIUMAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.5%CVE-2025-60023MEDIUMAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.5%CVE-2026-23890MEDIUMpnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.binEPSS 0.5%CVE-2024-36362MEDIUMIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was posEPSS 0.5%CVE-2026-78212HIGH4MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File ReadEPSS 0.5%CVE-2024-2461MEDIUMIf exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessibleEPSS 0.5%CVE-2024-20310MEDIUMA vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unEPSS 0.5%CVE-2026-16230CRITICALFormidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature FieldEPSS 0.5%CVE-2026-41612MEDIUMVisual Studio Code Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-58464HIGHQuMagieEPSS 0.5%CVE-2025-64714MEDIUMPrivateBin's template-switching feature allows arbitrary local file inclusion through path traversalEPSS 0.5%CVE-2024-22415HIGHUnsecured endpoints in the jupyter-lsp server extensionEPSS 0.5%CVE-2026-10595HIGHPath Traversal Vulnerability in parisneo/lollmsEPSS 0.5%CVE-2026-41551CRITICALA vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a path traversal vulnerability because user iEPSS 0.5%CVE-2023-29377MEDIUMAn issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renamesEPSS 0.5%CVE-2026-59149MEDIUMMockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)EPSS 0.5%CVE-2026-21620LOWTFTP Path TraversalEPSS 0.5%CVE-2026-25057CRITICALZip Slip in MarkUs config upload allowing RCEEPSS 0.5%