Falhas do tipo CWE-24

119 resultados

Travessia de diretórios via sequências relativas

A aplicação não valida corretamente caminhos de arquivo fornecidos pelo usuário, permitindo que sequências como '../' sejam usadas para escapar do diretório pretendido e acessar arquivos fora da área permitida. Um atacante consegue ler, modificar ou deletar arquivos sensíveis do servidor navegando para diretórios pais.

Exemplo

Uma API de download recebe um parâmetro file=/relatorios/vendas.pdf, mas não sanitiza a entrada. O atacante manda file=../../etc/passwd e consegue ler o arquivo de senhas do sistema Linux, porque o código simplesmente concatena o caminho sem validação.

Como mitigar

Valide caminhos contra uma lista branca de arquivos ou diretórios permitidos; use APIs de manipulação de paths que normalizem sequências (rejeitando '..' após normalização); implemente controle de acesso no nível do arquivo; nunca confie em entrada do usuário para construir caminhos sem validação prévia.

CVE-2026-33431MEDIUMRoxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version ViewerEPSS 0.4%CVE-2022-1743MEDIUM2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24EPSS 0.4%CVE-2025-56760MEDIUMWhen Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path travEPSS 0.3%CVE-2026-73573LOWIn Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality dEPSS 0.3%CVE-2026-21436MEDIUMeopkg has Path Traversal: '../filedir' vulnerabilityEPSS 0.3%CVE-2025-68430MEDIUMCVAT vulnerable to directory traversal via mounted share listingEPSS 0.3%CVE-2026-40318HIGHSiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`EPSS 0.3%CVE-2026-76353MEDIUMPath Traversal through Knowledge Bundle Replication in Splunk EnterpriseEPSS 0.3%CVE-2025-61189MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerabilitEPSS 0.3%CVE-2025-61188MEDIUMJeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files witEPSS 0.3%CVE-2026-66140HIGHExim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because argumentsEPSS 0.3%CVE-2025-13199MEDIUMcode-projects Email Logging Interface signup.cpp path traversalEPSS 0.3%CVE-2023-20166MEDIUMCisco Identity Services Engine Path Traversal VulnerabilitiesEPSS 0.2%CVE-2026-22810HIGHJoplin: Path traversal in OneNote importer allows overwriting arbitrary filesEPSS 0.2%CVE-2026-41082HIGHIn OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.EPSS 0.2%CVE-2025-46646MEDIUMIn Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of EPSS 0.2%CVE-2025-26427MEDIUMIn multiple locations, there is a possible Android/data access due to a path traversal error. This could lead to local escalation of privileEPSS 0.1%CVE-2025-70819MEDIUMZettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../EPSS 0.1%CVE-2026-28538MEDIUMPath traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availabiEPSS 0.1%