Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2026-78409HIGHUtil-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinksEPSS 0.1%CVE-2025-53594MEDIUMQfinder Pro, Qsync, QVPNEPSS 0.1%CVE-2026-61859MEDIUMImageMagick before 7.1.2-26 Policy Bypass via script operationEPSS 0.1%CVE-2026-58198MEDIUMChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainerEPSS 0.1%CVE-2026-56796MEDIUMDell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.EPSS 0.1%CVE-2026-65065MEDIUMData::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOWEPSS 0.1%CVE-2026-6891MEDIUMImproper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with lEPSS 0.1%CVE-2026-6892MEDIUMImproper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges toEPSS 0.1%CVE-2026-15059MEDIUMsystemd-oomd: unprivileged users can terminate arbitrary processesEPSS 0.1%CVE-2026-12036MEDIUMAn improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could alEPSS 0.1%CVE-2026-88265MEDIUMCrun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chownEPSS 0.1%CVE-2026-27456MEDIUMutil-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device SetupEPSS 0.1%CVE-2026-17435LOWFile::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating filesEPSS 0.1%CVE-2026-88264MEDIUMCrun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfsEPSS 0.1%CVE-2026-64616LOWData::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOWEPSS 0.1%CVE-2026-53766MEDIUMchrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing rootsEPSS 0.1%CVE-2026-15994HIGHDuring an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial VantEPSS 0.1%CVE-2026-4135MEDIUMDuring an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could alloEPSS 0.1%CVE-2026-40717MEDIUMDell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privilEPSS 0.1%CVE-2026-86469MEDIUMGlib2: toctou symlink race in `g_file_create_replace_destination` fallback pathEPSS 0.1%