Weaknesses of type CWE-641

17 results

Restrição inadequada de nomes de arquivos e recursos

A aplicação não valida ou restringe adequadamente os nomes de arquivos e recursos que os usuários podem criar ou manipular. Um atacante pode usar caracteres especiais, caminhos relativos, nomes reservados do SO ou sequências perigosas para acessar arquivos fora do escopo pretendido, contornar controles de segurança ou causar comportamento inesperado do sistema.

Example

Um formulário de upload permite que o usuário salve arquivos em um diretório específico, mas não valida o nome. Se o atacante submete '../../../etc/passwd' ou '..\..\windows\system32\config\sam', a aplicação pode salvar o arquivo fora do diretório seguro ou sobrescrever recursos críticos do sistema.

How to mitigate

Implemente whitelist de caracteres permitidos nos nomes de arquivo (apenas letras, números, hífen, underscore e ponto). Rejeite caminhos relativos, caracteres nulos, nomes reservados do SO (CON, PRN, AUX no Windows) e normalize o caminho completo antes de qualquer operação, validando que está dentro do diretório esperado.

CVE-2021-41146HIGHArbitrary command execution on Windows in qutebrowserEPSS 1.4%CVE-2026-25177HIGHActive Directory Domain Services Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2024-30063MEDIUMWindows Distributed File System (DFS) Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-0046HIGHImproper Restriction of Names for Files and Other Resources in lirantal/daloradiusEPSS 1.0%CVE-2022-23536MEDIUMAlertmanager can expose local files content via specially crafted configEPSS 0.8%CVE-2025-21361HIGHMicrosoft Outlook Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-27140HIGHCode execution vulnerability in SWIG code generation in cmd/goEPSS 0.7%CVE-2025-21402HIGHMicrosoft Office OneNote Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-50023HIGHyt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)EPSS 0.6%CVE-2022-36302HIGHFile path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access difEPSS 0.6%CVE-2025-47173HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-47953HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-45312MEDIUMArbitrary language parameter can passed to `aspell` executable via spelling requests in overleafEPSS 0.5%CVE-2024-47260MEDIUM51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allEPSS 0.4%CVE-2026-46581HIGHIn Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, aEPSS 0.3%CVE-2026-50510HIGHGitHub Copilot Remote Code Execution VulnerabilityEPSS 0.2%CVE-2019-25623MEDIUMLuminance Studio 2.17 Denial of Service via Malformed InputEPSS 0.2%