Falhas do tipo CWE-36

151 resultados

Traversal de Diretório via Caminho Absoluto

A aplicação usa entrada do usuário para construir caminhos de arquivo, mas não valida se o resultado aponta para fora do diretório permitido. Um atacante injeta caminhos absolutos (como /etc/passwd) que ignoram as restrições de diretório, acessando arquivos sensíveis do sistema.

Exemplo

Um servidor web recebe ?file=../../../etc/passwd ou file=/etc/passwd e o código concatena direto em open('/uploads/' + file) sem verificar se o caminho resultante está realmente dentro de /uploads/, expondo dados confidenciais.

Como mitigar

Valide e normalize o caminho com funções seguras (realpath, Path.resolve), rejeite caminhos absolutos e sequências de traversal (..), e use listas brancas de arquivos permitidos. Garanta que o caminho final está dentro do diretório esperado antes de abrir o arquivo.

CVE-2024-10047MEDIUMDirectory Listing Vulnerability in parisneo/lollms-webuiEPSS 1.0%CVE-2024-8501HIGHArbitrary File Download in modelscope/agentscopeEPSS 1.0%CVE-2023-5115MEDIUMAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary filesEPSS 1.0%CVE-2026-89009HIGHWAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_serverEPSS 1.0%CVE-2025-4799HIGHWP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File DeletionEPSS 0.9%CVE-2025-9518HIGHatec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File DeletionEPSS 0.9%CVE-2023-4172MEDIUMChengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx absolute path traversalEPSS 0.9%CVE-2023-32054HIGHVolume Shadow Copy Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2024-4881HIGHPath Traversal in parisneo/lollmsEPSS 0.9%CVE-2024-2548HIGHPath Traversal in parisneo/lollms-webuiEPSS 0.9%CVE-2025-36357HIGHIBM Planning Analytics Local Directory TraversalEPSS 0.9%CVE-2024-45291MEDIUMPath traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheetEPSS 0.9%CVE-2024-12375MEDIUMLocal File Inclusion in automatic1111/stable-diffusion-webuiEPSS 0.9%CVE-2023-2101MEDIUMmoxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversalEPSS 0.8%CVE-2024-10833CRITICALArbitrary File Write in eosphoros-ai/db-gptEPSS 0.8%CVE-2024-10831CRITICALArbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gptEPSS 0.8%CVE-2026-49290HIGHSlopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCEEPSS 0.8%CVE-2025-8575HIGHLWS Cleaner <= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws_cl_delete_file'EPSS 0.8%CVE-2024-9924CRITICALHgiga OAKlouds - Arbitrary File Read And DeleteEPSS 0.8%CVE-2023-5022MEDIUMDedeCMS select_templets_post.php absolute path traversalEPSS 0.8%