Fallos del tipo CWE-436

159 resultados

Conflito de Interpretação

Ocorre quando diferentes componentes ou camadas da aplicação interpretam o mesmo dado de formas distintas, levando a decisões de segurança inconsistentes. Um validador pode considerar uma entrada segura enquanto um processador posterior a interpreta de modo diferente, abrindo brecha para bypass de controles.

Ejemplo

Um WAF valida a URL decodificando %2e%2e (..), mas o servidor web interpreta sequências de escape de forma distinta e permite traversal de diretório. Ou um filtro XSS bloqueia '<script>' mas a aplicação JavaScript interpreta a mesma string codificada como código executável.

Cómo mitigar

Normalize e valide dados uma única vez, no ponto mais próximo de entrada, usando a mesma codificação e regras que o processador final usará. Implemente testes que verifiquem que validador e processador concordam na interpretação, inclusive com variações de codificação (UTF-8, URL encoding, HTML entities).

CVE-2026-68968HIGHApache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill idEPSS 0.4%CVE-2026-110202HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator StrippingEPSS 0.4%CVE-2023-45715LOWHCL BigFix Platform is susceptible to a Denial of Service attackEPSS 0.4%CVE-2026-75931HIGHfast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesEPSS 0.4%CVE-2026-14643MEDIUMundici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directivesEPSS 0.4%CVE-2026-42272HIGHHeimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretationEPSS 0.4%CVE-2024-20293MEDIUMA vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower ThEPSS 0.4%CVE-2026-92598HIGHNodemailer before 9.1.0 IDN/Punycode Domain Allow-list BypassEPSS 0.4%CVE-2026-61789MEDIUMDBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validationEPSS 0.4%CVE-2026-92597HIGHNodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 CommentEPSS 0.4%CVE-2026-18446HIGHfast-uri vulnerable to host confusion via backslash authority introducerEPSS 0.4%CVE-2026-84394HIGHfast-uri vulnerable to host confusion via an unclosed bracket in the URI authorityEPSS 0.4%CVE-2023-52892HIGHIn phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificatesEPSS 0.4%CVE-2026-73511MEDIUMEnvoy: Potential path-matching/authentication bypass when using Envoy in combination with a backend stripping per-segment path (matrix) parameters (e.g. Apache Tomcat)EPSS 0.4%CVE-2026-109297HIGHOpen WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence RulesEPSS 0.4%CVE-2026-69246HIGHGuzzle: Noncanonical host can bypass host-based checksEPSS 0.4%CVE-2026-42274HIGHHeimdall: Authorization bypass via path normalization mismatchEPSS 0.4%CVE-2026-112362CRITICAL@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targetsEPSS 0.4%CVE-2026-114131MEDIUMNuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routesEPSS 0.4%CVE-2026-122310CRITICALKyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPathEPSS 0.4%