Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2025-33112HIGHIBM AIX command executionEPSS 0.2%CVE-2022-42476HIGHA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.11, ForEPSS 0.2%CVE-2025-24819MEDIUMA Relative Path Traversal vulnerability in Nokia MantaRay NMEPSS 0.2%CVE-2026-33206HIGHcalibre has a path traversal vulnerabilityEPSS 0.2%CVE-2026-22070HIGHColorOS Assistant Path Traversal VulnerabilityEPSS 0.2%CVE-2026-58481MEDIUMNetwork-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directoryEPSS 0.2%CVE-2026-58413MEDIUMEnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment dataEPSS 0.2%CVE-2024-54461LOWUnsanitized Filenames in Flutter package file_selector_android Allow File OverwritesEPSS 0.2%CVE-2024-54462LOWUnsanitized Filenames in Flutter package image_picker_android Allow File OverwritesEPSS 0.2%CVE-2022-34378MEDIUMDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative path traversal vulnerEPSS 0.2%CVE-2025-10203HIGHRelative Path Traversal Vulnerability in Digilent WaveFormsEPSS 0.2%CVE-2022-33937HIGHDell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could EPSS 0.2%CVE-2023-34117LOWRelative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via locEPSS 0.2%CVE-2026-24909MEDIUMvlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction.EPSS 0.2%CVE-2026-41046HIGHpath traversal via `config` parameter in qSnapperEPSS 0.2%CVE-2026-50181HIGHLangroid: Path traversal in the file tools allows read/write outside configured current directoryEPSS 0.2%CVE-2025-62187LOWIn Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux EPSS 0.2%CVE-2024-40588MEDIUMMultiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCaEPSS 0.2%CVE-2025-55115CRITICALBMC Control-M/Agent path traversal local privilege escalationEPSS 0.2%CVE-2026-53416HIGHZoom VDI - Path TraversalEPSS 0.2%