Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2024-48892MEDIUMA relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an auEPSS 0.4%CVE-2025-64757LOWAstro Development Server is Vulnerable to Arbitrary Local File ReadEPSS 0.4%CVE-2024-37138MEDIUMDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerabiliEPSS 0.4%CVE-2026-80130HIGHDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path TravEPSS 0.4%CVE-2024-8510MEDIUMN-central Path TraversalEPSS 0.4%CVE-2026-34026HIGHPath traversal in Wertheim SafeController Software allows authenticated users to download arbitrary filesEPSS 0.4%CVE-2026-15913HIGHPath Traversal in Fortra's GoAnywhere MFT EndpointEPSS 0.4%CVE-2026-25121HIGHapko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside baseEPSS 0.4%CVE-2026-62843MEDIUMFile Browser: Archive builder turns backslash filenames into path traversal (zip-slip)EPSS 0.4%CVE-2026-63303MEDIUMPath Traversal in Quick.CMSEPSS 0.4%CVE-2026-20081MEDIUMCisco Unity Connection Arbitrary File Download VulnerabilityEPSS 0.4%CVE-2026-20078MEDIUMCisco Unity Connection Arbitrary File Download VulnerabilityEPSS 0.4%CVE-2025-24350HIGHA vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privilegeEPSS 0.4%CVE-2025-55202LOWOpencast has a partial path traversal vulnerability in UI configEPSS 0.4%CVE-2026-55100HIGHhashi-vault-js has a path traversal and query parameter injectionEPSS 0.4%CVE-2026-18192HIGHVacron｜IP Camera - Arbitrary File ReadEPSS 0.4%CVE-2025-10249MEDIUMSlider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File ReadEPSS 0.4%CVE-2026-8326CRITICALRemote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCEEPSS 0.4%CVE-2021-22281MEDIUMZip Slip Vulnerability in B&R Automation Studio Project ImportEPSS 0.4%CVE-2023-49801MEDIUMLif Auth Server vulnerable to uncontrolled data in path expression EPSS 0.4%