Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2024-12642HIGHChunghwa Telecom TenderDocTransfer - Arbitrary File WriteEPSS 0.4%CVE-2026-43533HIGHOpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media TagsEPSS 0.4%CVE-2026-50454HIGHWindows User Interface Core Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-43016MEDIUMIn JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug sessionEPSS 0.4%CVE-2026-6540HIGHL7 policy bypass via unnormalized HTTP path matchingEPSS 0.4%CVE-2026-8650MEDIUMAuthenticated Path Traversal allows MOVEit admins to view arbitrary system filesEPSS 0.4%CVE-2024-6985MEDIUMPath Traversal in api open_personality_folder in parisneo/lollms-webuiEPSS 0.4%CVE-2019-0074MEDIUMJunos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.EPSS 0.4%CVE-2026-31927MEDIUMAnviz CX7 Firmware Relative Path TraversalEPSS 0.4%CVE-2024-22226LOW Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker couldEPSS 0.4%CVE-2026-15415MEDIUMPath traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-serverEPSS 0.4%CVE-2026-10073HIGHInterinfo｜DreamMaker - Arbitrary File ReadEPSS 0.4%CVE-2026-82768HIGHPath traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or alterEPSS 0.4%CVE-2026-8361HIGHGladinet Triofox Path Traversal in WOSDefaultHttpModule.dllEPSS 0.4%CVE-2026-48569HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.4%CVE-2026-72948MEDIUMWindows DNS Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-10074MEDIUMInterinfo｜DreamMaker - Arbitrary File ReadEPSS 0.3%CVE-2022-42470HIGHA relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allEPSS 0.3%CVE-2026-53528HIGHFileWiki has path traversal in RenameAsset via unsanitized oldFilename parameterEPSS 0.3%CVE-2016-20023MEDIUMIn CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file wEPSS 0.3%