Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2023-43078MEDIUMDell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folEPSS 0.2%CVE-2024-31952MEDIUMAn issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalEPSS 0.2%CVE-2026-16130MEDIUMnearai ironclaw write_file path_utils.rs validate_path link followingEPSS 0.2%CVE-2026-15621MEDIUMmosaxiv clawlet File Tools fs_ops.go edit_file link followingEPSS 0.2%CVE-2023-6335MEDIUMImproper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled FileEPSS 0.2%CVE-2025-30642MEDIUMA link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) sitEPSS 0.2%CVE-2026-6959MEDIUMNomad vulnerable to arbitrary file read/write on client host through symlink attackEPSS 0.2%CVE-2024-13960HIGHLink Following Local Privilege Escalation Vulnerability in AVG TuneUp Version 23.4EPSS 0.2%CVE-2026-41121HIGHDell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link Following’) vulnerEPSS 0.2%CVE-2024-13961HIGHAvast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2025-7073HIGHLocal Privilege Escalation via Arbitrary File Operation in Bitdefender Total SecurityEPSS 0.2%CVE-2026-65069MEDIUMData::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOWEPSS 0.2%CVE-2026-47833MEDIUMsetupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process insiEPSS 0.2%CVE-2026-81572HIGHLocal Privilege Escalation in CodeMeter Runtime on WindowsEPSS 0.2%CVE-2026-56692MEDIUMNanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFilesEPSS 0.2%CVE-2026-44711HIGHpam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruptionEPSS 0.2%CVE-2026-25906HIGHDell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privEPSS 0.2%CVE-2025-43490HIGHHP Hotkey Support – Escalation of PrivilegeEPSS 0.2%CVE-2026-15392HIGHDBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted locationEPSS 0.2%CVE-2025-2102MEDIUMImproper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.ThiEPSS 0.2%