Falhas do tipo CWE-36

151 resultados

Traversal de Diretório via Caminho Absoluto

A aplicação usa entrada do usuário para construir caminhos de arquivo, mas não valida se o resultado aponta para fora do diretório permitido. Um atacante injeta caminhos absolutos (como /etc/passwd) que ignoram as restrições de diretório, acessando arquivos sensíveis do sistema.

Exemplo

Um servidor web recebe ?file=../../../etc/passwd ou file=/etc/passwd e o código concatena direto em open('/uploads/' + file) sem verificar se o caminho resultante está realmente dentro de /uploads/, expondo dados confidenciais.

Como mitigar

Valide e normalize o caminho com funções seguras (realpath, Path.resolve), rejeite caminhos absolutos e sequências de traversal (..), e use listas brancas de arquivos permitidos. Garanta que o caminho final está dentro do diretório esperado antes de abrir o arquivo.

CVE-2024-6854HIGHArbitrary File Overwrite in h2oai/h2o-3EPSS 0.8%CVE-2026-82092HIGHDataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareEPSS 0.8%CVE-2025-6381HIGHBeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File DeletionEPSS 0.8%CVE-2024-11978HIGHInterinfo DreamMaker - Arbitrary File Reading through Path TraversalEPSS 0.8%CVE-2026-47606MEDIUMNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful expEPSS 0.7%CVE-2026-20834MEDIUMWindows Spoofing VulnerabilityEPSS 0.7%CVE-2025-8009MEDIUMSecurity Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File ReadEPSS 0.7%CVE-2026-15302MEDIUMARMember <= 4.0.27 - Directory Traversal via X-FILENAMEEPSS 0.7%CVE-2026-32175MEDIUM.NET Core Tampering VulnerabilityEPSS 0.7%CVE-2024-1703LOWZhongBangKeJi CRMEB openfile absolute path traversalEPSS 0.7%CVE-2025-7846HIGHWordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields FunctionEPSS 0.7%CVE-2025-8909HIGHWellChoose｜Organization Portal System - Arbitrary File Reading through Path TraversalEPSS 0.7%CVE-2024-33620HIGHAbsolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the fEPSS 0.7%CVE-2025-5927HIGHEverest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File DeletionEPSS 0.7%CVE-2025-14848MEDIUMAdvantech WebAccess/SCADA Absolute Path TraversalEPSS 0.7%CVE-2026-1330HIGHHAMASTAR Technology｜MeetingHub - Arbitrary File ReadEPSS 0.7%CVE-2026-68487CRITICALPath traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.EPSS 0.6%CVE-2026-57211MEDIUMRabbitMQ: UNC SSRF affecting the management UI on WindowsEPSS 0.6%CVE-2024-45290HIGHPath traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheetEPSS 0.6%CVE-2024-20379MEDIUMA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower ManagemeEPSS 0.6%