Falhas do tipo CWE-915

199 resultados

Modificação descontrolada de atributos dinâmicos de objetos

Ocorre quando a aplicação permite que usuários modifiquem atributos de objetos sem validação adequada, especialmente em linguagens que permitem criar propriedades dinamicamente (como Python, JavaScript, PHP). Um atacante consegue injetar ou sobrescrever atributos críticos — flags de admin, valores monetários, referências internas — alterando o comportamento da aplicação.

Exemplo

Um sistema em Python recebe JSON do usuário e faz `user.__dict__.update(request.json)` para popular dados de perfil. O atacante envia `{"is_admin": true}` e ganha privilégios sem autorização, porque nenhuma validação protege qual atributo pode ser modificado.

Como mitigar

Use listas explícitas de propriedades permitidas (whitelist) para update de objetos. Separe dados de entrada (DTO/schema) de modelos internos, mapeando apenas campos seguros. Nunca faça merge direto de entrada de usuário em atributos de objetos críticos.

CVE-2026-42863HIGHFlowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow ReassignmentEPSS 0.3%CVE-2026-25521CRITICALLocutus is vulnerable to Prototype PollutionEPSS 0.3%CVE-2026-119565MEDIUMPlausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification UpdateEPSS 0.3%CVE-2026-45396MEDIUMOpen WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data ManipulationEPSS 0.3%CVE-2026-47850MEDIUMSpring Data REST allows mutation of the version property of immutable aggregates via PUTEPSS 0.3%CVE-2026-72655MEDIUMImproperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data ModificationEPSS 0.3%CVE-2026-48943MEDIUMJoomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26EPSS 0.3%CVE-2026-105180MEDIUMJeebase UserService info updateUser dynamically-determined object attributesEPSS 0.3%CVE-2026-92119CRITICALApache Allura: REST API Mass AssignmentEPSS 0.3%CVE-2025-7104MEDIUMMass Assignment in danny-avila/librechatEPSS 0.3%CVE-2026-118538MEDIUMa2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributesEPSS 0.3%CVE-2026-54601MEDIUMFastGPT: reTrainingCollection allows server-owned datasetId override causing cross-tenant authorization confusionEPSS 0.3%CVE-2026-40569CRITICALFreeScout's Mass Assignment in Mailbox Connection Settings Enables Silent Email ExfiltrationEPSS 0.3%CVE-2026-34445HIGHONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.EPSS 0.3%CVE-2026-48150CRITICALBudibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assignEPSS 0.3%CVE-2026-97858MEDIUMGuangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object AttributesEPSS 0.3%CVE-2026-21695MEDIUMTitra API Contains Mass Assignment VulnerabilityEPSS 0.3%CVE-2026-102780MEDIUMJoomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4EPSS 0.3%CVE-2026-104908HIGHMISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default FlaggingEPSS 0.3%CVE-2026-106550HIGHCVE-2026-106550EPSS 0.3%