Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2026-72677HIGHRelative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other ResourcesEPSS 0.3%CVE-2024-24940LOWIn JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archivesEPSS 0.3%CVE-2026-77897HIGHMicrosoft Power Automate Desktop Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-65810HIGH.NET Framework Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-60020MEDIUMnncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving via a crafted path in packet data.EPSS 0.3%CVE-2026-60093MEDIUMApache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDirEPSS 0.3%CVE-2025-13199MEDIUMcode-projects Email Logging Interface signup.cpp path traversalEPSS 0.3%CVE-2026-59995MEDIUMsftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attackerEPSS 0.3%CVE-2026-59996MEDIUMscp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinaEPSS 0.3%CVE-2025-22873LOWImproper access to parent directory of root in osEPSS 0.2%CVE-2023-34394HIGHKeysight N6845A Relative Path TraversalEPSS 0.2%CVE-2022-4123LOWA flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resultingEPSS 0.2%CVE-2024-32116MEDIUMMultiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzEPSS 0.2%CVE-2026-1762LOWEnervista UR Setup Directory Traversal VulnerabilityEPSS 0.2%CVE-2026-77113MEDIUMPath Traversal Vulnerability in apport-unpackEPSS 0.2%CVE-2024-35274LOWAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions EPSS 0.2%CVE-2023-47613MEDIUMA CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit CiEPSS 0.2%CVE-2023-27993MEDIUMA relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary direEPSS 0.2%CVE-2026-79728MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path TravEPSS 0.2%CVE-2023-32778LOWAn issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload.EPSS 0.2%