Falhas do tipo CWE-36

151 resultados

Traversal de Diretório via Caminho Absoluto

A aplicação usa entrada do usuário para construir caminhos de arquivo, mas não valida se o resultado aponta para fora do diretório permitido. Um atacante injeta caminhos absolutos (como /etc/passwd) que ignoram as restrições de diretório, acessando arquivos sensíveis do sistema.

Exemplo

Um servidor web recebe ?file=../../../etc/passwd ou file=/etc/passwd e o código concatena direto em open('/uploads/' + file) sem verificar se o caminho resultante está realmente dentro de /uploads/, expondo dados confidenciais.

Como mitigar

Valide e normalize o caminho com funções seguras (realpath, Path.resolve), rejeite caminhos absolutos e sequências de traversal (..), e use listas brancas de arquivos permitidos. Garanta que o caminho final está dentro do diretório esperado antes de abrir o arquivo.

CVE-2024-13945HIGHStored Absolute Path TraversalEPSS 0.4%CVE-2026-26337HIGHHyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRFEPSS 0.4%CVE-2026-4373HIGHJetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media FieldEPSS 0.4%CVE-2026-42315HIGHpyLoad: Path Traversal via Package Folder Name in set_package_dataEPSS 0.4%CVE-2026-10075MEDIUMInterinfo｜DreamMaker - Path TraversalEPSS 0.4%CVE-2026-69612HIGHWindows Error Reporting Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-68896HIGHMicrosoft Windows Search Component Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-27117MEDIUMbit7z has a path traversal vulnerabilityEPSS 0.4%CVE-2026-13189HIGHSpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.4%CVE-2025-15236MEDIUMQuanta Computer｜QOCA aim AI Medical Cloud Platform - Path TraversalEPSS 0.4%CVE-2025-15237MEDIUMQuanta Computer｜QOCA aim AI Medical Cloud Platform - Path TraversalEPSS 0.4%CVE-2024-12643HIGHChunghwa Telecom tbm-client - Arbitrary File DeleteEPSS 0.3%CVE-2024-12646HIGHChunghwa Telecom topm-client - Arbitrary File DeleteEPSS 0.3%CVE-2026-53698MEDIUMSilverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.EPSS 0.3%CVE-2026-116635MEDIUMImproper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP ServerEPSS 0.3%CVE-2024-12644HIGHChunghwa Telecom tbm-client - Arbitrary File Copy and PasteEPSS 0.3%CVE-2026-13346MEDIUMpip absolute path traversal during download from malicious package indexesEPSS 0.3%CVE-2025-13282HIGHChunghwa Telecom｜TenderDocTransfer - Arbitrary File DeleteEPSS 0.3%CVE-2024-57966MEDIUMlibarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.EPSS 0.3%CVE-2025-70820LOWZettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder.EPSS 0.3%