Fallos del tipo CWE-346

588 resultados

Validação incorreta de origem (Origin Validation Error)

A aplicação falha em validar corretamente a origem (origem HTTP, domínio, referência) de requisições ou recursos, permitindo que um atacante simule estar vindo de uma origem confiável. Isso quebra mecanismos de segurança como CORS, CSRF e validações de referência, abrindo porta para ataques cross-site.

Ejemplo

Um banco implementa proteção CSRF verificando se o header `Origin` é igual a `banco.com.br`, mas não valida subdomínios. Um atacante consegue fazer requisições de `falso.banco.com.br` que passam na validação e transferem dinheiro da vítima.

Cómo mitigar

Valide a origem de forma rigorosa usando whitelist explícita (não apenas prefixos ou sufixos), implemente tokens CSRF anti-previsíveis, configure CORS corretamente evitando `Access-Control-Allow-Origin: *`, e use SameSite cookies quando possível.

CVE-2026-14053MEDIUMInsufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rendEPSS 0.2%CVE-2026-34930HIGHAn origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. EPSS 0.2%CVE-2024-51072MEDIUMAn issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to cause a Denial of Service (DoS) via ECEPSS 0.2%CVE-2026-46728HIGHDas U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.EPSS 0.2%CVE-2026-55767MEDIUMGuzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzleEPSS 0.2%CVE-2026-55837MEDIUMdbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform TokensEPSS 0.2%CVE-2026-13881MEDIUMInappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policEPSS 0.2%CVE-2025-14279HIGHDNS Rebinding Vulnerability in mlflow/mlflowEPSS 0.2%CVE-2025-62584HIGHWhale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.EPSS 0.2%CVE-2026-92034CRITICALSite isolation issue in the Graphics componentEPSS 0.2%CVE-2026-16375CRITICALSite isolation issue in the Networking: HTTP componentEPSS 0.2%CVE-2023-32993MEDIUMJenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configurEPSS 0.2%CVE-2026-8971MEDIUMSame-origin policy bypass in the Networking: JAR componentEPSS 0.2%CVE-2026-1997MEDIUMCertain HP OfficeJet Pro Printers - Information DisclosureEPSS 0.2%CVE-2026-55637HIGHgenieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transportEPSS 0.2%CVE-2024-28883HIGHBIG-IP APM browser network access VPN client vulnerabilityEPSS 0.2%CVE-2026-92702CRITICALCocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP pathEPSS 0.2%CVE-2024-2377HIGHA vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this EPSS 0.2%CVE-2026-13021MEDIUMInappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to bypass sEPSS 0.2%CVE-2026-45021MEDIUMKuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdminEPSS 0.2%