Falhas do tipo CWE-36

151 resultados

Traversal de Diretório via Caminho Absoluto

A aplicação usa entrada do usuário para construir caminhos de arquivo, mas não valida se o resultado aponta para fora do diretório permitido. Um atacante injeta caminhos absolutos (como /etc/passwd) que ignoram as restrições de diretório, acessando arquivos sensíveis do sistema.

Exemplo

Um servidor web recebe ?file=../../../etc/passwd ou file=/etc/passwd e o código concatena direto em open('/uploads/' + file) sem verificar se o caminho resultante está realmente dentro de /uploads/, expondo dados confidenciais.

Como mitigar

Valide e normalize o caminho com funções seguras (realpath, Path.resolve), rejeite caminhos absolutos e sequências de traversal (..), e use listas brancas de arquivos permitidos. Garanta que o caminho final está dentro do diretório esperado antes de abrir o arquivo.

CVE-2025-8912HIGHWellChoose｜Organization Portal System - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2024-10651MEDIUMCHANGING Information Technology IDExpert - Arbitrary File Read through Path TraversalEPSS 0.6%CVE-2025-8213HIGHNinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File DeletionEPSS 0.6%CVE-2026-10044HIGHai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/EPSS 0.6%CVE-2024-7323MEDIUMDigiwin EasyFlow .NET - Arbitrary File DownloadEPSS 0.6%CVE-2024-8778MEDIUMThe SYSCOM Group OMFLOW - Arbitrary File ReadEPSS 0.6%CVE-2023-50955LOWIBM InfoSphere Information Server information disclosureEPSS 0.6%CVE-2024-28806HIGHAn issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path.EPSS 0.6%CVE-2026-0846HIGHArbitrary File Read via Absolute Path Input in nltk.util.filestring()EPSS 0.6%CVE-2023-1176MEDIUMAbsolute Path Traversal in mlflow/mlflowEPSS 0.6%CVE-2024-8497HIGHFranklin Fueling Systems TS-550 EVO Absolute Path TraversalEPSS 0.6%CVE-2026-44029MEDIUMAn issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-fiEPSS 0.6%CVE-2023-5390MEDIUMAn attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC andEPSS 0.6%CVE-2025-0001MEDIUMauthenticated arbitrary file read vulnerabilityEPSS 0.6%CVE-2024-56321LOWGoCD can allow malicious GoCD admins to abuse backup configuration to gain additional host accessEPSS 0.6%CVE-2026-6418MEDIUMPaperCut NG/MF: Path Traversal in Shared Account SynchronizationEPSS 0.6%CVE-2025-9259HIGHUniong｜WebITR - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2025-9258HIGHUniong｜WebITR - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2025-9257HIGHUniong｜WebITR - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2025-9256HIGHUniong｜WebITR - Arbitrary File Reading through Path TraversalEPSS 0.6%