Falhas do tipo CWE-23

509 resultados

Traversal de diretório por falta de validação de caminho

O software usa entrada externa para construir um caminho de arquivo, mas não neutraliza sequências como '..' que podem escapar do diretório restrito. Um atacante pode acessar ou manipular arquivos fora da área permitida usando essas sequências de navegação.

Exemplo

Uma API de download de documentos recebe o parâmetro 'arquivo=relatorio.pdf' e monta o caminho '/home/docs/' + arquivo. Se o atacante enviar 'arquivo=../../etc/passwd', o caminho resultante '/home/docs/../../etc/passwd' resolve para '/etc/passwd', expondo informações sensíveis do sistema.

Como mitigar

Valide e normalize o caminho completo resolvido (use realpath() ou Path.resolve()) e verifique se fica dentro do diretório permitido; alterne para uma whitelist de arquivos conhecidos ou use índices seguros em vez de construir caminhos diretamente com entrada do usuário.

CVE-2024-8551CRITICALPath Traversal in modelscope/agentscopeEPSS 1.0%CVE-2023-0511CRITICALAM Java Policy Agent path traversalEPSS 1.0%CVE-2023-0339CRITICALAM Web Policy Agent path traversalEPSS 1.0%CVE-2024-7693HIGHTeam Johnlong software Raiden MAILD Remote Management System - Arbitrary File Reading through Path TraversalEPSS 1.0%CVE-2025-48817HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-43399HIGHMobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library FilesEPSS 1.0%CVE-2026-56196HIGHWindows Admin Center (WAC) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-20059CRITICALPingAM Java Policy Agent path traversalEPSS 1.0%CVE-2024-20449HIGHCisco Nexus Dashboard Fabric Controller Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-1045LOWMuYuCMS filesdel.html path traversalEPSS 0.9%CVE-2026-50663HIGHGame: Age of Empires II: Definitive Edition Remote Code Execution VulnerabilityEPSS 0.9%CVE-2021-28798HIGHRelative Path Traversal Vulnerability in QTS and QuTS heroEPSS 0.9%CVE-2022-21177—There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 verEPSS 0.9%CVE-2023-37288MEDIUMSmartBPM.NET - Path TraversalEPSS 0.9%CVE-2024-2318MEDIUMZKTeco ZKBio Media Service Port 9999 download path traversalEPSS 0.9%CVE-2022-41335HIGHA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, ForEPSS 0.9%CVE-2021-29488MEDIUMCreation of files outside the Download Folder through malicious PAR2 filesEPSS 0.9%CVE-2021-32825LOWZipSlip vulnerability in bblfshdEPSS 0.9%CVE-2023-3941CRITICALMultiple arbitrary file writes in ZkTeco-based OEM devicesEPSS 0.9%CVE-2025-59682LOWAn issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract() function, uEPSS 0.9%