Weaknesses of type CWE-706

64 results

Resolução incorreta de nome ou referência

O código tenta acessar um recurso (variável, função, arquivo, classe) pelo nome, mas resolve para um objeto diferente do esperado. Isso ocorre por ambiguidade no escopo, namespaces conflitantes, shadowing de variáveis ou ordem de resolução inadequada. Um atacante pode explorar isso para injetar código malicioso, acessar dados sensíveis ou desviar o fluxo de execução.

Example

Um programa importa duas bibliotecas que definem uma função com o mesmo nome (ex: `processData()`). Se a resolução não é explícita, o código pode chamar a função errada e executar lógica não-intencional. Outro cenário: uma variável local `usuario` é criada após a verificação, mascarando a variável global de segurança.

How to mitigate

Use namespaces explícitos, qualificadores completos (ex: `modulo.funcao()`) e evite shadowing de variáveis. Configure linters e analisadores estáticos para detectar ambiguidades. Em linguagens como Python ou C++, seja explícito com imports e use type hints para melhorar rastreabilidade.

CVE-2020-15505CRITICALA remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, EPSS 99.7%KEVCVE-2021-40539CRITICALZoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execuEPSS 99.0%KEVCVE-2024-27292HIGHDocassemble unauthorized access through URL manipulationEPSS 69.5%CVE-2020-26233HIGHRemote Code Execution in Git Credential Manager CoreEPSS 5.9%CVE-2022-27778—A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--reEPSS 3.7%CVE-2014-125125HIGHA10 Networks AX Loadbalancer Path TraversalEPSS 2.0%CVE-2021-37315CRITICALIncorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attacEPSS 1.1%CVE-2022-31089HIGHInvalid file request can crashe parse-serverEPSS 1.1%CVE-2021-37214HIGHLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-3EPSS 1.1%CVE-2022-29445MEDIUMWordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerabilityEPSS 1.0%CVE-2023-31814CRITICALD-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.EPSS 0.9%CVE-2024-35198CRITICALTorchServe bypass allowed_urls configurationEPSS 0.8%CVE-2023-28643MEDIUMPotential share collision for recipients when caching is enabled in nextcloud serverEPSS 0.8%CVE-2026-40912HIGHTraefik: StripPrefixRegex auth bypass via Path/RawPath desyncEPSS 0.8%CVE-2021-37213MEDIUMLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-2EPSS 0.8%CVE-2024-27295HIGHDirectus MySQL accent insensitive email matchingEPSS 0.7%CVE-2021-37215MEDIUMLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-4EPSS 0.7%CVE-2022-30258CRITICALAn issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domainEPSS 0.7%CVE-2022-30257CRITICALAn issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domainEPSS 0.7%CVE-2024-57785MEDIUMZenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_uploads.php.EPSS 0.7%