Falhas do tipo CWE-697

104 resultados

Comparação incorreta

O código compara valores ou objetos de forma inadequada, usando operadores errados ou não considerando o tipo de dados envolvido. Isso permite que condições de segurança sejam contornadas: um atacante entra onde não deveria porque a lógica de comparação não funciona como o desenvolvedor pretendia.

Exemplo

Um sistema valida acesso comparando a string do token com == em vez de usar comparação constante: se (token == tokenEsperado). Um atacante testa strings como '0' ou null que podem ser iguais por coerção de tipo, burlando a autenticação.

Como mitigar

Use operadores de comparação apropriados ao tipo (=== ou equals() em vez de ==), implemente comparação constante-time para valores sensíveis (HMAC ou funções específicas), e valide tipos explicitamente antes de comparar. Em java, use .equals() ou MessageDigest.isEqual(); em Python, use == com casting apropriado ou bibliotecas como secrets.compare_digest().

CVE-2026-93957MEDIUMolivier-ls PHP-FTS Filter Matching SearchEngine.php matchesSingleFilter comparisonEPSS 0.5%CVE-2026-45569HIGHRoxy-WI: Path-traversal patch in commit d4d10006 is a no-op (tuple-membership bug)EPSS 0.5%CVE-2026-92087HIGH@fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed authEPSS 0.5%CVE-2026-73258MEDIUMMongoose: Multipart boundary/header scan logic error in mg_http_next_multipartEPSS 0.5%CVE-2026-91997MEDIUMevolution-api through 2.3.7 Prometheus Metrics IP Allowlist BypassEPSS 0.4%CVE-2026-57222MEDIUMSuricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6EPSS 0.4%CVE-2015-6964MEDIUMMultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiEPSS 0.4%CVE-2026-49340HIGHgonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the hostEPSS 0.4%CVE-2025-9401MEDIUMHuangDou UTCMS Login login.php comparisonEPSS 0.4%CVE-2024-29026HIGHOwncast cross origin requestEPSS 0.4%CVE-2024-28246MEDIUMKaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocolsEPSS 0.4%CVE-2026-59890MEDIUMsetuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+EPSS 0.4%CVE-2026-45567HIGHRoxy-WI: Authentication bypass via 'api' substring in URL + unauthenticated /api/gptEPSS 0.4%CVE-2026-79913MEDIUMCloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addressesEPSS 0.4%CVE-2021-20219—A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local aEPSS 0.4%CVE-2026-50029MEDIUMjs-toml has silent type confusion via falsy-primitive duplicate-key bypassEPSS 0.4%CVE-2023-25673HIGHTensorFlow has Floating Point Exception in TensorListSplit with XLA EPSS 0.4%CVE-2023-27579HIGHTensorFlow has Floating Point Exception in TFLite in conv kernelEPSS 0.4%CVE-2023-25669HIGHTensorFlow has Floating Point Exception in AvgPoolGrad with XLAEPSS 0.4%CVE-2023-25675HIGHTensorFlow has Segfault in Bincount with XLAEPSS 0.4%