Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2023-6069CRITICALImproper Link Resolution Before File Access in froxlor/froxlorEPSS 0.8%CVE-2024-35254HIGHAzure Monitor Agent Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-26238HIGHMicrosoft PLUGScheduler Scheduled Task Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-10986HIGHLocal File Read (LFI) by Tarslip Symlink via arxiv_download() API in binary-husky/gpt_academicEPSS 0.8%CVE-2026-57571CRITICALCrawl4AI arbitrary file write via download filename path traversalEPSS 0.8%CVE-2025-21373HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-8103HIGHLink Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)EPSS 0.8%CVE-2023-21567MEDIUMVisual Studio Denial of Service VulnerabilityEPSS 0.8%CVE-2025-49739HIGHVisual Studio Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2022-45412HIGHWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a sEPSS 0.8%CVE-2025-21274MEDIUMWindows Event Tracing Denial of Service VulnerabilityEPSS 0.8%CVE-2024-43603MEDIUMVisual Studio Collector Service Denial of Service VulnerabilityEPSS 0.8%CVE-2024-37143CRITICALDell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x tEPSS 0.8%CVE-2024-44258HIGHThis issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, EPSS 0.8%CVE-2026-11940HIGHtarfile extraction filter bypass allows escaping the destination directoryEPSS 0.8%CVE-2022-43293MEDIUMWacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe.EPSS 0.8%CVE-2026-53486CRITICALdecompress: Archive extraction can create files and links outside the target directoryEPSS 0.7%CVE-2024-29989HIGHAzure Monitor Agent Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2025-26625HIGHGit LFS may write to arbitrary files via crafted symlinksEPSS 0.7%CVE-2025-53109HIGHModel Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink HandlingEPSS 0.7%