Falhas do tipo CWE-346

696 resultados

Validação inadequada de origem (CORS/mesma origem)

A aplicação falha em validar corretamente a origem (domain/protocolo/porta) das requisições, permitindo que código malicioso de outros domínios acesse recursos protegidos. Isso quebra a política de mesma origem do navegador e pode expor dados sensíveis ou permitir ações não autorizadas.

Exemplo

Um servidor aceita qualquer valor no header Origin sem validação, ou valida de forma fraca (ex: substring matching). Um atacante hospeda um site malicioso que, ao ser visitado, faz requisições CORS para a aplicação vulnerável e consegue ler dados da vítima autenticada.

Como mitigar

Implemente validação rigorosa de origem: compare o header Origin contra uma whitelist explícita de domínios confiáveis (nunca use wildcards), valide protocolo e porta também, e desative CORS se não for necessário. Use credenciais com cautela em requisições cross-origin (credenciais + Access-Control-Allow-Origin: * é inseguro).

CVE-2024-55948HIGHAnonymous cache poisoning via XHR requests in DiscourseEPSS 0.3%CVE-2023-29745HIGHAn issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating thEPSS 0.3%CVE-2022-50975HIGHMultiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configurationEPSS 0.3%CVE-2025-23023HIGHAnonymous cache poisoning via request headers in DiscourseEPSS 0.3%CVE-2026-77339MEDIUMProcess Compose: Browser DNS rebinding lets websites control local process-compose MCP toolsEPSS 0.3%CVE-2026-58497HIGHUni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requestsEPSS 0.3%CVE-2022-45139MEDIUMWAGO: Origin validation error through CORS misconfigurationEPSS 0.3%CVE-2026-18098HIGHIBM i is Affected By XML injection flaw in Navigator for iEPSS 0.3%CVE-2026-2790HIGHSame-origin policy bypass in the Networking: JAR componentEPSS 0.3%CVE-2020-15104MEDIUMTLS Validation Vulnerability in EnvoyEPSS 0.3%CVE-2025-59159CRITICALSillyTavern Web Interface Vulnerable to DNS RebindingEPSS 0.3%CVE-2026-73419MEDIUMNextAuth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created themEPSS 0.2%CVE-2026-59723HIGHCline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)EPSS 0.2%CVE-2026-107503HIGHIn Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including EPSS 0.2%CVE-2026-13793MEDIUMInsufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a craEPSS 0.2%CVE-2026-13887MEDIUMInappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renEPSS 0.2%CVE-2026-13913MEDIUMInsufficient policy enforcement in Autofill in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user toEPSS 0.2%CVE-2026-13826MEDIUMInappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised thEPSS 0.2%CVE-2026-13840MEDIUMInsufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a EPSS 0.2%CVE-2026-18847HIGHIBM i is Affected By Multiple Vulnerabilities in Navigator for iEPSS 0.2%