Fallos del tipo CWE-183

48 resultados

Lista de entradas permitidas muito permissiva

Ocorre quando a aplicação valida entrada contra uma lista de valores 'seguros', mas essa lista é tão abrangente ou mal definida que acaba aceitando dados maliciosos. O atacante explora brechas na lógica de validação para injetar payloads que deveriam ter sido bloqueados.

Ejemplo

Um sistema valida nomes de arquivo aceitando apenas extensões 'permitidas': .jpg, .png, .pdf. Mas a lista também inclui .exe por engano, ou o desenvolvedor acredita que checar prefixos é suficiente e uma requisição 'shell.pdf.exe' passa pela validação.

Cómo mitigar

Use abordagem de whitelist explícita e restrita (não expansiva), compare contra valores exatos após normalizar entrada, e realize testes de contorno (boundary testing) na validação. Prefira negar tudo e permitir apenas o essencial, em vez do oposto.

CVE-2022-34450MEDIUM PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially EPSS 0.4%CVE-2026-46608HIGHGlances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)EPSS 0.4%CVE-2026-40899HIGHDataEase has an Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2026-32881MEDIUMewe has an Overly Permissive List of Allowed InputsEPSS 0.4%CVE-2026-33979HIGHExpress XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk)EPSS 0.4%CVE-2024-47565MEDIUMA vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate tEPSS 0.4%CVE-2024-38522MEDIUMCSP bypass in Hush LineEPSS 0.3%CVE-2026-55581HIGHmcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` ExecutableEPSS 0.3%CVE-2026-46341MEDIUMApify MCP server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix MatchingEPSS 0.3%CVE-2026-67315MEDIUMaxios 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 NO_PROXY Bypass via 0.0.0.0EPSS 0.3%CVE-2026-59802MEDIUMPasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push PayloadEPSS 0.3%CVE-2026-16129MEDIUMprincezuda SafestClaw Built-in Web shell.py ShellAction._validate_command incomplete blacklistEPSS 0.3%CVE-2026-41240MEDIUMDOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)EPSS 0.3%CVE-2026-67345HIGHMaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code TheftEPSS 0.3%CVE-2026-4509MEDIUMPbootCMS File Upload file.php incomplete blacklistEPSS 0.3%CVE-2026-90808MEDIUMHKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklistEPSS 0.3%CVE-2026-54694CRITICALNationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account TakeoverEPSS 0.3%CVE-2026-35649MEDIUMOpenClaw < 2026.3.22 - Settings Reconciliation Bypass via Empty AllowlistEPSS 0.3%CVE-2026-8918HIGHA permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or EPSS 0.3%CVE-2026-43574MEDIUMOpenClaw < 2026.4.12 - Improper Authorization via Empty Approver ListsEPSS 0.2%