Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2025-62364MEDIUMtext-generation-webui allows arbitrary file read via symbolic link uploadEPSS 0.6%CVE-2026-14904HIGHRES Auth.GetUserPrivateKey Arbitrary File ReadEPSS 0.6%CVE-2026-55108HIGHKubeVela Terraform remote loader DoS via unbounded file readEPSS 0.6%CVE-2022-38604HIGHWacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability.EPSS 0.6%CVE-2026-23879HIGHpy7zr: Arbitrary File Write VulnerabilityEPSS 0.6%CVE-2026-24842HIGHnode-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path TraversalEPSS 0.6%CVE-2025-47181HIGHMicrosoft Edge (Chromium-based) Update Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-36737HIGHAzure Network Watcher VM Agent Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-25718CRITICALGitea template repository generation mishandles symlinked pathsEPSS 0.6%CVE-2026-8170HIGHExtremeXOS Privilege Escalation via Symlink Following in File UtilitiesEPSS 0.6%CVE-2022-38482MEDIUMA link-manipulation issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP4.EPSS 0.6%CVE-2026-55607HIGHClaude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code ExecutionEPSS 0.6%CVE-2019-12749HIGHdbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in soEPSS 0.5%CVE-2025-71212HIGHA link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected instaEPSS 0.5%CVE-2023-38175HIGHMicrosoft Windows Defender Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-8959HIGHHashiCorp go-getter Vulnerable to Arbitrary Read through Symlink AttackEPSS 0.5%CVE-2026-24047MEDIUM@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain BypassEPSS 0.5%CVE-2017-15097MEDIUMPrivilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user accoEPSS 0.5%CVE-2023-21760HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2023-36876HIGHReliability Analysis Metrics Calculation (RacTask) Elevation of Privilege VulnerabilityEPSS 0.5%