Falhas do tipo CWE-26

17 resultados

Traversal de Diretórios (Path Traversal)

Ocorre quando a aplicação não valida adequadamente caminhos de arquivo fornecidos pelo usuário, permitindo que sequências como '../' sejam usadas para acessar diretórios fora do escopo permitido. Um atacante consegue ler, escrever ou deletar arquivos em locais não pretendidos do servidor.

Exemplo

Uma API retorna arquivos de um diretório específico quando você acessa /download?file=documento.pdf. Se não houver validação, um atacante consegue fazer /download?file=../../etc/passwd e obter o arquivo de senhas do sistema.

Como mitigar

Valide e normalize caminhos usando funções nativas (realpath em PHP, Path.GetFullPath em .NET) antes de acessar o arquivo; mantenha uma lista branca de arquivos permitidos; nunca concatene entrada do usuário diretamente em caminhos de arquivo.

CVE-2024-20345MEDIUMA vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct diEPSS 2.2%CVE-2021-34762HIGHCisco Firepower Management Center Software Authenticated Directory Traversal VulnerabilityEPSS 1.9%CVE-2021-42021—A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video DEPSS 1.7%CVE-2023-50255CRITICALZip Path Traversal in Deepin-CompressorEPSS 1.1%CVE-2024-29466HIGHDirectory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.EPSS 1.0%CVE-2023-25802HIGHRoxy-WI has Path Traversal vulnerabilityEPSS 1.0%CVE-2024-28064CRITICALKiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated filEPSS 0.9%CVE-2025-25295HIGHLabel Studio has a Path Traversal Vulnerability via image FieldEPSS 0.7%CVE-2024-31551HIGHDirectory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via cEPSS 0.7%CVE-2026-42196CRITICALdjango-s3file: Relative path traversalEPSS 0.6%CVE-2024-25466HIGHDirectory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbEPSS 0.5%CVE-2024-5865HIGHArbitrary File Reading in Centrify PASEPSS 0.5%CVE-2025-53908HIGHRomM vulnerable to Authenticated Path TraversalEPSS 0.5%CVE-2026-25575HIGHNavigaTUM has a Path Traversal Vulnerability in the propose_edits functionalityEPSS 0.4%CVE-2024-5866MEDIUMArbitrary Directory Listing in Centrify PASEPSS 0.4%CVE-2022-45133MEDIUMMahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured XEPSS 0.3%CVE-2026-46747MEDIUMA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize patEPSS 0.2%