Fallos del tipo CWE-1289

34 resultados

Validação inadequada de equivalência perigosa em entrada

A aplicação valida entrada comparando valores de forma insegura, aceitando representações diferentes que deveriam ser tratadas como equivalentes perigosas. Por exemplo, aceitar '/path/../file' e '/path/file' como diferentes durante validação, quando a segunda é a forma canonicalizada que o sistema realmente acessa, permitindo contorno de filtros de segurança.

Ejemplo

Um WAF bloqueia requisições para '/admin/config' mas permite '/admin//config' (barra dupla) ou '/admin/./config' (ponto de diretório). O validador não normaliza o caminho antes de comparar contra a blacklist, então o navegador/servidor interpreta '//config' como 'config', contornando a proteção.

Cómo mitigar

Normalizar e canonicalizar toda entrada antes de validar (remover './', '../', barras duplicadas, decodificar URL/entidades). Comparar a forma canônica contra regras de segurança, nunca a entrada bruta. Considerar usar bibliotecas de segurança consolidadas que já fazem isso corretamente.

CVE-2024-45179HIGHAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web intEPSS 2.6%CVE-2026-48710MEDIUMStarlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksEPSS 1.8%CVE-2026-47729MEDIUMSquid: Memory disclosure in FTP gatewayEPSS 1.5%CVE-2025-62718MEDIUMAxios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRFEPSS 1.2%CVE-2026-33515MEDIUMSquid has issues in ICP message handlingEPSS 1.0%CVE-2022-0675MEDIUMPuppet Firewall Module May Leave Unmanaged RulesEPSS 0.9%CVE-2026-39821CRITICALInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaEPSS 0.7%CVE-2024-8372MEDIUMAngularJS improper sanitization in 'srcset' attributeEPSS 0.6%CVE-2024-45308MEDIUMMySQL & free URL mode allows to hide existing notes in hedgedocEPSS 0.6%CVE-2026-33806HIGHfastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type HeaderEPSS 0.4%CVE-2026-46644MEDIUMsymfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload decodes to ASCII-only: insecure equivalenceEPSS 0.4%CVE-2026-60074HIGHDate::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in checkEPSS 0.4%CVE-2026-33496HIGHOry Oathkeeper has an authentication bypass by cache key confusionEPSS 0.4%CVE-2026-39972HIGHMercure has a Topic Selector Cache Key CollisionEPSS 0.3%CVE-2026-3563MEDIUMImproper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with EPSS 0.3%CVE-2026-33810HIGHCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509EPSS 0.3%CVE-2026-27610HIGHParse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only SessionsEPSS 0.3%CVE-2026-49942HIGHNet::CIDR::Set versions through 0.20 for Perl did not validate network masksEPSS 0.3%CVE-2026-45190MEDIUMNet::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypassEPSS 0.3%CVE-2026-45191MEDIUMNet::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypassEPSS 0.3%