Falhas do tipo CWE-59

965 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2024-10007HIGHPre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege EscalationEPSS 0.8%CVE-2026-53535MEDIUMActivepieces: Arbitrary file write in git-sync via path traversal and symlinksEPSS 0.8%CVE-2022-45412HIGHWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a sEPSS 0.8%CVE-2024-30065MEDIUMWindows Themes Denial of Service VulnerabilityEPSS 0.8%CVE-2024-10986HIGHLocal File Read (LFI) by Tarslip Symlink via arxiv_download() API in binary-husky/gpt_academicEPSS 0.8%CVE-2023-6069CRITICALImproper Link Resolution Before File Access in froxlor/froxlorEPSS 0.8%CVE-2024-35254HIGHAzure Monitor Agent Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-26238HIGHMicrosoft PLUGScheduler Scheduled Task Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-101894CRITICAL@xhmikosr/decompress: Path traversal via symlink chainEPSS 0.8%CVE-2026-57571CRITICALCrawl4AI arbitrary file write via download filename path traversalEPSS 0.8%CVE-2020-8103HIGHLink Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)EPSS 0.8%CVE-2025-21373HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2023-21567MEDIUMVisual Studio Denial of Service VulnerabilityEPSS 0.8%CVE-2025-21274MEDIUMWindows Event Tracing Denial of Service VulnerabilityEPSS 0.8%CVE-2013-0248MEDIUMThe default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploadEPSS 0.8%CVE-2024-43603MEDIUMVisual Studio Collector Service Denial of Service VulnerabilityEPSS 0.8%CVE-2025-53109HIGHModel Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink HandlingEPSS 0.8%CVE-2024-37143CRITICALDell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x tEPSS 0.8%CVE-2022-43293MEDIUMWacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe.EPSS 0.8%CVE-2024-44258HIGHThis issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, EPSS 0.8%