Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2026-2627HIGHSoftland FBackup Backup/Restore HID.dll link followingEPSS 0.2%CVE-2024-51721HIGHVulnerabilities in SecuSUITE Server Components Impact SecuSUITEEPSS 0.2%CVE-2026-53784HIGHrsync < 3.5.0 Path Traversal via Symlink Module RootEPSS 0.2%CVE-2025-3224HIGHElevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory DeletionEPSS 0.2%CVE-2022-31256HIGHsendmail: mail to root privilege escalation via sm-client.pre scriptEPSS 0.2%CVE-2023-27529HIGHWacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulnerability. When a useEPSS 0.2%CVE-2024-45315MEDIUMThe Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlierEPSS 0.2%CVE-2026-28866MEDIUMThis issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4EPSS 0.2%CVE-2025-43394MEDIUMThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 2EPSS 0.2%CVE-2022-2898MEDIUMMeasuresoft ScadaPro Server and Client Link FollowingEPSS 0.2%CVE-2020-3432MEDIUMCisco AnyConnect Secure Mobility Client for Mac OS File Corruption VulnerabilityEPSS 0.2%CVE-2025-0146LOWZoom Workplace app for macOS - Symlink FollowingEPSS 0.2%CVE-2026-74796HIGHOpenTofu before 1.11.7 Symlink Following Path TraversalEPSS 0.2%CVE-2026-82248MEDIUMgitoxide before 0.33.0 Path Traversal via symlink followingEPSS 0.2%CVE-2026-53803HIGHrsync < 3.5.0 Symlink Following Arbitrary File OverwriteEPSS 0.2%CVE-2026-50526HIGH.NET Tampering VulnerabilityEPSS 0.2%CVE-2025-31198MEDIUMThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS VenturaEPSS 0.2%CVE-2025-62676MEDIUMAn Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 EPSS 0.2%CVE-2023-45159HIGH1E Client installer can perform arbitrary file deletion on protected filesEPSS 0.2%CVE-2023-43590HIGHLink following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via locaEPSS 0.2%