Weaknesses of type CWE-441

231 results

Deputado Confuso (Proxy ou Intermediário Não Intencional)

Quando um componente intermediário (servidor, API, função, etc.) executa ações em nome de um cliente sem validar adequadamente quem realmente autorizou aquela ação, um atacante consegue explorar a confiança já estabelecida entre esse intermediário e outros sistemas. O intermediário acaba agindo como 'procurador involuntário' do atacante, realizando operações que o sistema final nunca autorizaria se a requisição viesse diretamente do atacante.

Example

Um servidor de cache proxy que aceita requisições GET de qualquer origem e as repassa a um serviço interno sem verificar se o cliente original deveria ter acesso àqueles dados. Um atacante faz o proxy buscar informações sensíveis do servidor interno e devolver para si, usando a confiança que o servidor interno tem no proxy.

How to mitigate

Valide a identidade e autorização do cliente original antes de repassar requisições para sistemas internos; use tokens ou assinaturas criptográficas que viagem junto com a requisição; implemente listas de origem segura (whitelist) rigorosas e autenticação mútua entre componentes intermediários e backends.

CVE-2026-45723LOWOmni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematicEPSS 0.5%CVE-2026-81303MEDIUMHawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostnameEPSS 0.5%CVE-2026-77246HIGHMCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload PathEPSS 0.5%CVE-2026-101907HIGHAxios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRFEPSS 0.5%CVE-2025-25061MEDIUMUnintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remotEPSS 0.5%CVE-2026-30225MEDIUMOliveTin: RestartAction always runs actions as guestEPSS 0.5%CVE-2026-77255HIGHMCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issueEPSS 0.5%CVE-2026-7381CRITICALPlack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewritingEPSS 0.4%CVE-2026-86003HIGHCoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCPEPSS 0.4%CVE-2026-43910HIGHAppium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutorEPSS 0.4%CVE-2026-77348HIGHWallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via `endpoints/payments/search.php`EPSS 0.4%CVE-2026-109373CRITICALZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session CookieEPSS 0.4%CVE-2026-16456MEDIUMOdh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputyEPSS 0.4%CVE-2026-101905HIGHAxios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnectionEPSS 0.4%CVE-2026-53931MEDIUMNocoDB: Server-Side Request Forgery via Spreadsheet Import EndpointEPSS 0.4%CVE-2026-39961MEDIUMAiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSourceEPSS 0.4%CVE-2025-48710MEDIUMkro (Kube Resource Orchestrator) 0.1.0 before 0.2.1 allows users (with permission to create or modify ResourceGraphDefinition resources) to EPSS 0.4%CVE-2026-70148MEDIUMWindows Broadcast DVR User Service Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-50022MEDIUMMetacat acts as unintended proxy to backend Apache SOLR engineEPSS 0.4%CVE-2024-30128HIGHAn open proxy vulnerability affects HCL Nomad server on DominoEPSS 0.4%