Falhas do tipo CWE-348

104 resultados

Confiança em fonte menos confiável

A aplicação aceita dados ou comandos de uma origem com menor nível de confiança (como entrada do usuário, rede não segura ou terceiros) e os trata com a mesma confiança de fontes seguras (variáveis internas, administrador). Isso permite que um atacante injete ou manipule dados que o programa deveria validar rigorosamente.

Exemplo

Um sistema de e-commerce confia diretamente no identificador de usuário enviado no parâmetro URL para recuperar dados da conta, sem verificar se quem fez a requisição é realmente aquele usuário. Um atacante muda o ID na URL e acessa contas de outros clientes.

Como mitigar

Sempre validar, sanitizar e autorizar dados de fontes externas antes de usá-los em operações sensíveis. Implementar controles de acesso (autenticação e autorização) que verificam se quem requisita tem permissão real, não apenas confiar em parâmetros do cliente.

CVE-2025-55292HIGHIn Meshtastic, an attacker can spoof licensed amateur flag for a nodeEPSS 0.1%CVE-2026-12249CRITICALCanonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-EnrollmentEPSS 0.1%CVE-2026-118265MEDIUMEcho: X-Real-IP extractor trusts the header value instead of the sending peerEPSS 0.1%CVE-2026-35391HIGHBulwark Webmail getClientIP() trusted client-controlled X-Forwarded-For value, enabling rate limit bypass and audit log forgeryEPSS 0.1%CVE-2026-111450MEDIUMWheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If EPSS 0.1%CVE-2026-84718MEDIUMAutomation-controller: automation-controller: client ip spoofing in audit/access logs via unrestricted x-forwarded-for trustEPSS 0.1%CVE-2026-108555LOWPairDrop through 1.11.2 IP Spoofing via cf-connecting-ip HeaderEPSS 0.1%CVE-2026-120633—CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_portEPSS 0.1%CVE-2026-114437MEDIUMChi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-ForEPSS 0.1%CVE-2026-112378MEDIUMUse of Less Trusted Source in GitLabEPSS 0.1%CVE-2025-32900MEDIUMIn the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information EPSS 0.1%CVE-2026-111934MEDIUMCoder before 2.34.7 IP Spoofing via X-Forwarded-For HeaderEPSS 0.1%CVE-2026-24910MEDIUMIn Bun before 1.3.5, the default trusted dependencies list (aka trust allow list) can be spoofed by a non-npm package in the case of a matchEPSS 0.1%CVE-2025-48825LOWRICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who EPSS 0.1%CVE-2025-58422LOWRICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middlEPSS 0.1%CVE-2026-102630LOWUnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-HostEPSS 0.1%CVE-2026-92530MEDIUMUse of Less Trusted Source in GitLabEPSS 0.1%CVE-2026-50243MEDIUM'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAILEPSS 0.1%CVE-2026-35507MEDIUMShynet before 0.14.0 allows Host header injection in the password reset flow.EPSS 0.1%CVE-2025-43918MEDIUMSSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificEPSS 0.1%