Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2025-27553HIGHApache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENTEPSS 1.4%CVE-2024-11314CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%CVE-2024-11315CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%CVE-2024-11313CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%CVE-2024-11312CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%CVE-2024-11311CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%CVE-2020-4039HIGHDirectory Traversal Vulnerability in SUSI.AI ServerEPSS 1.4%CVE-2018-13299MEDIUMRelative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to uplEPSS 1.4%CVE-2022-38202HIGHBUG-000152121 - Directory traversal vulnerability in ArcGIS Server.EPSS 1.3%CVE-2021-22650HIGHOvarro TBox Relative Path TraversalEPSS 1.3%CVE-2022-1648MEDIUMRelative Path Traversal to Remote Code Execution in File ManagerEPSS 1.3%CVE-2021-43176—The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extenEPSS 1.3%CVE-2022-29097MEDIUMDell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerabiliEPSS 1.3%CVE-2019-11822MEDIUMRelative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remoEPSS 1.3%CVE-2024-11067HIGHD-Link DSL6740C - Arbitrary File Reading through Path TraversalEPSS 1.3%CVE-2023-33144MEDIUMVisual Studio Code Spoofing VulnerabilityEPSS 1.3%CVE-2026-25951HIGHFUXA has a Path Traversal Sanitization BypassEPSS 1.3%CVE-2019-19287—A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse through the file systemEPSS 1.3%CVE-2026-51026MEDIUMDirectory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request.EPSS 1.3%CVE-2023-4760HIGHRemote Code Execution in Eclipse RAP on WindowsEPSS 1.3%