Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2025-12341HIGHermig1979 AntiDupl Delete Duplicate Image AntiDupl.NET.WinForms.exe link followingEPSS 0.2%CVE-2025-14693HIGHUgreen DH2100+ USB symlinkEPSS 0.2%CVE-2025-1683HIGHSymbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File DeletionEPSS 0.2%CVE-2024-13962HIGHLink Following Local Privilege Escalation Vulnerability in Avast Cleanup Premium Version 24.2.16593.17810EPSS 0.2%CVE-2023-28797MEDIUMLPE using arbitrary file delete with SymlinksEPSS 0.2%CVE-2024-13959HIGHLink Following Local Privilege Escalation Vulnerability in AVG TuneUp 24.2.16593.9844EPSS 0.2%CVE-2025-5296HIGHCWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written tEPSS 0.2%CVE-2024-9524HIGHPrivilege Escalation Vulnerability in Avira Prime Version 1.1.96.2EPSS 0.2%CVE-2022-0029MEDIUMCortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support FileEPSS 0.2%CVE-2024-52522MEDIUMRclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadataEPSS 0.2%CVE-2025-43446MEDIUMThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS TahoeEPSS 0.2%CVE-2024-12552HIGHWacom Center WTabletServicePro Link Following Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2025-64437MEDIUMKubeVirt Isolation Detection Flaw Allows Arbitrary File Permission ChangesEPSS 0.2%CVE-2024-13759HIGHLocal Privilege Escalation in Avira Prime 1.1.96.2 on Windows 10 x64EPSS 0.2%CVE-2025-11462CRITICALLocal Privilege Escalation Vulnerability in AWS Client VPN macOS ClientEPSS 0.2%CVE-2026-0827MEDIUMDuring an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in LenEPSS 0.2%CVE-2026-20633MEDIUMThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 2EPSS 0.2%CVE-2026-16077MEDIUMAstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link followingEPSS 0.2%CVE-2024-22038MEDIUMDoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridgeEPSS 0.2%CVE-2026-55443MEDIUMLangChain: Path traversal and sandbox escape in LangChain file-search middleware and loadersEPSS 0.2%