Weaknesses of type CWE-424

49 results

Proteção inadequada de caminhos alternativos

É quando a aplicação ou sistema protege um caminho de acesso (rota, endpoint, arquivo), mas deixa aberta uma rota alternativa que leva ao mesmo recurso sem as mesmas verificações de segurança. O atacante contorna a proteção usando a via não defendida.

Example

Um sistema bloqueia acesso a /admin/users, mas a mesma funcionalidade está acessível via /admin/../users ou através de um parâmetro não sanitizado que redireciona internamente. Ou um WAF bloqueia a requisição POST, mas a aplicação aceita PUT para a mesma ação.

How to mitigate

Identifique todos os caminhos que levam ao mesmo recurso (aliases, redirects, métodos HTTP alternativos, path traversal) e aplique as mesmas regras de acesso em todas elas. Não confie em validação apenas no endpoint principal — valide na lógica de negócio também.

CVE-2023-5165HIGHDocker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellEPSS 0.3%CVE-2026-54423HIGHIn OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use tEPSS 0.3%CVE-2025-58079MEDIUMImproper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create maliciousEPSS 0.3%CVE-2026-89419MEDIUMOpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in otherEPSS 0.3%CVE-2022-1742MEDIUM2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424EPSS 0.3%CVE-2026-93353LOWcopyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr HandlersEPSS 0.3%CVE-2024-3460HIGHIn KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing EPSS 0.3%CVE-2024-3459HIGHKioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened EPSS 0.3%CVE-2025-0113MEDIUMCortex XDR Broker VM: Unauthorized Access to Broker VM Docker ContainersEPSS 0.3%CVE-2025-46654MEDIUMCodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploadiEPSS 0.3%CVE-2025-46655MEDIUMCodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be byEPSS 0.3%CVE-2026-121440MEDIUMWasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter BypassEPSS 0.2%CVE-2023-0629HIGHDocker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containersEPSS 0.2%CVE-2026-107352MEDIUMMissing authorization checks in Amazon Athena engine version 3 request handlingEPSS 0.2%CVE-2025-49162MEDIUMArris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character alloEPSS 0.2%CVE-2024-8781HIGHContainer Escape Vulnerability in TR7's Application Security Platform (ASP)EPSS 0.2%CVE-2023-46176MEDIUMIBM MQ privilege escalationEPSS 0.2%CVE-2026-110865HIGHRenovate before 44.60.1 HTTP Header Allowlist Bypass via Shared PresetsEPSS 0.2%CVE-2026-112917CRITICALDocker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcallEPSS 0.2%CVE-2025-6250HIGHPrivilege Management for Windows - Elevation of PrivilegeEPSS 0.2%