Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2026-40977MEDIUMWhen an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corruEPSS 0.1%CVE-2026-0291LOWPrisma Access Agent: Authenticated Limited File Deletion on LinuxEPSS 0.1%CVE-2026-86424LOWImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink RaceEPSS 0.1%CVE-2026-28689MEDIUMImageMagick has a Path Policy TOCTOU symlink race bypassEPSS 0.1%CVE-2025-48582HIGHIn multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. ThiEPSS 0.1%CVE-2024-14047HIGHImproper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of ServiceEPSS 0.1%CVE-2026-35359MEDIUMuutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink SwapEPSS 0.1%CVE-2026-16980MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2026-53765MEDIUMchrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directoryEPSS 0.1%CVE-2026-27105MEDIUMDell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulneraEPSS 0.1%CVE-2026-86422LOWImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink RaceEPSS 0.1%CVE-2025-46637HIGHDell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A localEPSS 0.1%CVE-2026-54587MEDIUMmport directory asset installation is vulnerable to symlink and path traversal racesEPSS 0.1%CVE-2026-54576MEDIUMmport package installation has symlink TOCTOU in chown and chmod handlingEPSS 0.1%CVE-2026-78622MEDIUMImproper Link Resolution in Okta Verify for Windows Uninstaller Data RemovalEPSS 0.1%CVE-2026-22702MEDIUMvirtualenv Has TOCTOU Vulnerabilities in Directory CreationEPSS 0.1%CVE-2026-44275MEDIUMDell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulneraEPSS 0.1%CVE-2026-35345MEDIUMuutils coreutils tail Privileged Information Disclosure via Symlink Replacement RaceEPSS 0.1%CVE-2026-28262MEDIUMDell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A loEPSS 0.1%CVE-2025-46636MEDIUMDell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low pEPSS 0.1%