Fallos del tipo CWE-424

49 resultados

Proteção inadequada de caminhos alternativos

Ocorre quando uma aplicação protege um caminho ou recurso principal, mas deixa desprotegido um caminho alternativo que leva ao mesmo destino. Um atacante contorna as defesas usando uma rota diferente (URL alternativa, extensão de arquivo não validada, diretório espelho) para acessar o que deveria estar bloqueado.

Ejemplo

Um site bloqueia acesso a /admin/painel, mas não protege /admin%2520/painel (URL codificada), ou permite acesso via /Admin/painel (variação de case), ou ainda deixa exposto /backup/admin.php que é cópia do arquivo protegido. O atacante usa qualquer um desses caminhos para burlar as defesas.

Cómo mitigar

Aplique validação e proteção em TODOS os caminhos equivalentes: normalize URLs antes de validar (resolve .., %xx, case), aplique regras de controle de acesso no nível mais profundo possível (núcleo da aplicação, não só no firewall/WAF), e teste sistematicamente variações (codificação, case, extensões, diretórios-espelho).

CVE-2023-5165HIGHDocker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellEPSS 0.3%CVE-2026-54423HIGHIn OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use tEPSS 0.3%CVE-2025-58079MEDIUMImproper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create maliciousEPSS 0.3%CVE-2026-89419MEDIUMOpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in otherEPSS 0.3%CVE-2022-1742MEDIUM2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424EPSS 0.3%CVE-2026-93353LOWcopyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr HandlersEPSS 0.3%CVE-2024-3460HIGHIn KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing EPSS 0.3%CVE-2024-3459HIGHKioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened EPSS 0.3%CVE-2025-0113MEDIUMCortex XDR Broker VM: Unauthorized Access to Broker VM Docker ContainersEPSS 0.3%CVE-2025-46654MEDIUMCodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploadiEPSS 0.3%CVE-2025-46655MEDIUMCodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be byEPSS 0.3%CVE-2026-121440MEDIUMWasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter BypassEPSS 0.2%CVE-2023-0629HIGHDocker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containersEPSS 0.2%CVE-2026-107352MEDIUMMissing authorization checks in Amazon Athena engine version 3 request handlingEPSS 0.2%CVE-2025-49162MEDIUMArris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character alloEPSS 0.2%CVE-2024-8781HIGHContainer Escape Vulnerability in TR7's Application Security Platform (ASP)EPSS 0.2%CVE-2023-46176MEDIUMIBM MQ privilege escalationEPSS 0.2%CVE-2026-110865HIGHRenovate before 44.60.1 HTTP Header Allowlist Bypass via Shared PresetsEPSS 0.2%CVE-2026-112917CRITICALDocker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcallEPSS 0.2%CVE-2025-6250HIGHPrivilege Management for Windows - Elevation of PrivilegeEPSS 0.2%