Fallos del tipo CWE-24

113 resultados

Travessia de diretórios com caminho relativo

A aplicação aceita entrada do usuário para construir caminhos de arquivo sem validar adequadamente sequências como '../', permitindo que um atacante navegue para fora do diretório esperado e acesse arquivos sensíveis do sistema. O perigo está em confiar na entrada sem sanitização, expondo arquivos que não deveriam ser acessíveis.

Ejemplo

Um site permite download de arquivos: GET /download?file=relatorio.pdf funciona, mas GET /download?file=../../../etc/passwd lê o arquivo de senhas do sistema, já que o caminho relativo não foi filtrado.

Cómo mitigar

Valide e canonicalize caminhos antes do acesso (converta ../relativo para absoluto), use listas brancas de arquivos permitidos, e confine acessos a um diretório raiz específico. Em linguagens modernas, use APIs seguras que não resolvem '..' em caminhos.

CVE-2023-7058MEDIUMSourceCodester Simple Student Attendance System path traversalEPSS 0.7%CVE-2024-2825MEDIUMlakernote EasyAdmin saveReportFile path traversalEPSS 0.7%CVE-2024-0465LOWcode-projects Employee Profile Management System download.php path traversalEPSS 0.7%CVE-2024-10379MEDIUMESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversalEPSS 0.7%CVE-2023-3098MEDIUMKylinSoft youker-assistant restore_all_sound_file path traversalEPSS 0.7%CVE-2025-57618HIGHA path traversal vulnerability in FastX3 thru 3.3.67 allows an unauthenticated attacker to read arbitrary files on the server. By leveragingEPSS 0.7%CVE-2025-53513HIGHZip slip vulnerability in JujuEPSS 0.7%CVE-2023-7098LOWicret EasyImages hide.php path traversalEPSS 0.7%CVE-2025-61318MEDIUMEmlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/EPSS 0.7%CVE-2024-3218MEDIUMShibang Communications IP Network Intercom Broadcasting System busyscreenshotpush.php path traversalEPSS 0.7%CVE-2024-8409MEDIUMABCD ABCD2 show_image.php path traversalEPSS 0.7%CVE-2024-0341LOWInis GET Request File.php path traversalEPSS 0.6%CVE-2025-32807MEDIUMA path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png EPSS 0.6%CVE-2025-67364HIGHfast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including fast_read_file. ThiEPSS 0.6%CVE-2024-13130MEDIUMDahua IPC-HFW1200S Web Interface Sha1Account1 path traversalEPSS 0.6%CVE-2024-6786MEDIUMMXview One Series vulnerable to Path TraversalEPSS 0.6%CVE-2025-1584MEDIUMopensolon Solon StaticMappings.java path traversalEPSS 0.5%CVE-2025-46094LOWLiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.EPSS 0.5%CVE-2025-51661HIGHA path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use locaEPSS 0.5%CVE-2023-20098MEDIUMA vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vEPSS 0.5%