Falhas do tipo CWE-424

49 resultados

Proteção inadequada de caminhos alternativos

O software protege um caminho ou recurso principal, mas deixa desprotegido um caminho alternativo que leva ao mesmo destino. Um atacante contorna as validações da rota esperada usando uma entrada equivalente que não foi validada adequadamente.

Exemplo

Uma aplicação bloqueia acesso a '/admin/painel' com autenticação, mas não valida '/admin/../painel' ou a codificação alternativa da URL. O atacante usa o caminho alternativo e bypassa a proteção porque a validação foi implementada apenas para o caminho canônico.

Como mitigar

Normalize todas as entradas (URLs, caminhos de arquivo, paths) antes de validar, removendo caracteres especiais e resolvendo referências relativas (/../). Aplique as mesmas regras de autenticação e autorização para qualquer variação de acesso ao recurso sensível, não apenas a forma esperada.

CVE-2023-5165HIGHDocker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellEPSS 0.3%CVE-2026-54423HIGHIn OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use tEPSS 0.3%CVE-2025-58079MEDIUMImproper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create maliciousEPSS 0.3%CVE-2026-89419MEDIUMOpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in otherEPSS 0.3%CVE-2022-1742MEDIUM2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424EPSS 0.3%CVE-2026-93353LOWcopyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr HandlersEPSS 0.3%CVE-2024-3460HIGHIn KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing EPSS 0.3%CVE-2024-3459HIGHKioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened EPSS 0.3%CVE-2025-0113MEDIUMCortex XDR Broker VM: Unauthorized Access to Broker VM Docker ContainersEPSS 0.3%CVE-2025-46654MEDIUMCodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploadiEPSS 0.3%CVE-2025-46655MEDIUMCodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be byEPSS 0.3%CVE-2026-121440MEDIUMWasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter BypassEPSS 0.2%CVE-2023-0629HIGHDocker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containersEPSS 0.2%CVE-2026-107352MEDIUMMissing authorization checks in Amazon Athena engine version 3 request handlingEPSS 0.2%CVE-2025-49162MEDIUMArris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character alloEPSS 0.2%CVE-2024-8781HIGHContainer Escape Vulnerability in TR7's Application Security Platform (ASP)EPSS 0.2%CVE-2023-46176MEDIUMIBM MQ privilege escalationEPSS 0.2%CVE-2026-110865HIGHRenovate before 44.60.1 HTTP Header Allowlist Bypass via Shared PresetsEPSS 0.2%CVE-2026-112917CRITICALDocker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcallEPSS 0.2%CVE-2025-6250HIGHPrivilege Management for Windows - Elevation of PrivilegeEPSS 0.2%