Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2026-48126HIGHAlgernon: Host header path traversal in --domain mode reads files and runs Lua from parent dirEPSS 0.3%CVE-2025-40605MEDIUMA Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injEPSS 0.3%CVE-2026-26362HIGHDell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A low privileged attacker with remote acceEPSS 0.3%CVE-2026-55474HIGHSnipe-IT: Directory traversal in displaySigEPSS 0.3%CVE-2026-29098MEDIUMSuiteCRM has Relative Path Traversal via ModuleBuilder Modules ExportCustom ActionEPSS 0.3%CVE-2025-25048MEDIUMIBM Jazz Foundation path traversalEPSS 0.3%CVE-2026-47680MEDIUMSource controller: Improper path handling allows traversalEPSS 0.3%CVE-2024-7058MEDIUMRelative Path Traversal in parisneo/lollms-webuiEPSS 0.3%CVE-2026-27117MEDIUMbit7z has a path traversal vulnerabilityEPSS 0.3%CVE-2026-82765HIGHPath traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitraryEPSS 0.3%CVE-2026-42085MEDIUMOpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenamesEPSS 0.3%CVE-2025-66386MEDIUMapp/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.EPSS 0.3%CVE-2024-12645MEDIUMChunghwa Telecom topm-client - Arbitrary File ReadEPSS 0.3%CVE-2026-56794MEDIUMDell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attackeEPSS 0.3%CVE-2026-10720MEDIUMMicroCeph path traversal issue in the remote-import APIEPSS 0.3%CVE-2026-8209MEDIUMGibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application EPSS 0.3%CVE-2025-54531HIGHIn JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on WindowsEPSS 0.3%CVE-2024-4330MEDIUMPath Traversal in parisneo/lollms-webuiEPSS 0.3%CVE-2026-2818HIGHZip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)EPSS 0.3%CVE-2025-46363MEDIUMDell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerEPSS 0.3%