Fallos del tipo CWE-348

104 resultados

Uso de fonte menos confiável

A aplicação toma decisões de segurança baseando-se em dados que vêm de uma fonte menos confiável (como entrada do usuário, cabeçalhos HTTP, variáveis de ambiente) quando deveria usar uma fonte de maior confiança (como base de dados interna, configuração do servidor, atributos validados). Isso permite que um atacante manipule o fluxo lógico forjando ou alterando esses dados.

Ejemplo

Um sistema de permissões que lê o nível de privilégio do usuário de um cookie ou cabeçalho HTTP em vez de consultá-lo no banco de dados do servidor. Um atacante modifica o cookie para 'admin' e ganha acesso a funcionalidades restritas.

Cómo mitigar

Sempre valide e recupere dados sensíveis de segurança (identidade, permissões, estado de autenticação) a partir de fontes confiáveis controladas pelo servidor (sessão autenticada, banco de dados). Nunca confie em dados fornecidos pelo cliente ou derivados de entrada do usuário para decisões críticas de autorização.

CVE-2025-55292HIGHIn Meshtastic, an attacker can spoof licensed amateur flag for a nodeEPSS 0.1%CVE-2026-12249CRITICALCanonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-EnrollmentEPSS 0.1%CVE-2026-118265MEDIUMEcho: X-Real-IP extractor trusts the header value instead of the sending peerEPSS 0.1%CVE-2026-35391HIGHBulwark Webmail getClientIP() trusted client-controlled X-Forwarded-For value, enabling rate limit bypass and audit log forgeryEPSS 0.1%CVE-2026-111450MEDIUMWheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If EPSS 0.1%CVE-2026-84718MEDIUMAutomation-controller: automation-controller: client ip spoofing in audit/access logs via unrestricted x-forwarded-for trustEPSS 0.1%CVE-2026-108555LOWPairDrop through 1.11.2 IP Spoofing via cf-connecting-ip HeaderEPSS 0.1%CVE-2026-120633—CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_portEPSS 0.1%CVE-2026-114437MEDIUMChi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-ForEPSS 0.1%CVE-2026-112378MEDIUMUse of Less Trusted Source in GitLabEPSS 0.1%CVE-2025-32900MEDIUMIn the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information EPSS 0.1%CVE-2026-111934MEDIUMCoder before 2.34.7 IP Spoofing via X-Forwarded-For HeaderEPSS 0.1%CVE-2026-24910MEDIUMIn Bun before 1.3.5, the default trusted dependencies list (aka trust allow list) can be spoofed by a non-npm package in the case of a matchEPSS 0.1%CVE-2025-48825LOWRICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who EPSS 0.1%CVE-2025-58422LOWRICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middlEPSS 0.1%CVE-2026-102630LOWUnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-HostEPSS 0.1%CVE-2026-92530MEDIUMUse of Less Trusted Source in GitLabEPSS 0.1%CVE-2026-50243MEDIUM'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAILEPSS 0.1%CVE-2026-35507MEDIUMShynet before 0.14.0 allows Host header injection in the password reset flow.EPSS 0.1%CVE-2025-43918MEDIUMSSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificEPSS 0.1%