CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows Update Stack Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +25 more +27 moreMicrosoft Windows Folder Redirection Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +25 more +27 moreWindows User Profile Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +12 more +14 moreWindows Update Service Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +25 more +27 moreWindows Installer Elevation of Privilege Vulnerability7.0 High
- ibm spss modelerA vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create...6.2 Medium
- westerndigital my cloud osWestern Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB...7.8 High
- git, apple xcode, debian linux +1 more +3 moremalicious repositories can execute remote code while cloning8.0 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +8 more +10 moreWindows Mobile Device Management Information Disclosure Vulnerability5.5 Medium
- digi connectport x2e firmwareDigi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python...7.8 High
- avahi, debian linux +1 moreavahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc...7.8 High
- mumble, debian linux +1 moreMumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a...8.8 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 moreMcAfee Total Protection (MTP) privilege escalation vulnerability7.8 High
- sap scimonoRemote Code Execution in SCIMono8.1 High
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and...5.5 Medium
- netapp oncommand unified manager, oncommand unified manager for 7-mode (core package) +1 moreOnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account...5.5 Medium
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed...6.5 Medium
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324...8.1 High
- google chromeInsufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a...7.8 High
- deislabs oraszip slip in ORAS7.7 High
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on...4.3 Medium
- cisco catalyst sd-wan manager, sd-wan solution, ios xe sd-wan +3 more +5 moreCisco SD-WAN Denial of Service Vulnerabilities8.6 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDirectory Traversal in Archive_Tar7.5 High
- cisco staros, asr 5000 series software +1 moreCisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability6.5 Medium
- jenkinsArbitrary file read vulnerability in workspace browsers in Jenkins6.5 Medium
- sudo project sudo, fedoraproject fedora, netapp hci management node +1 more +3 moreselinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to...7.8 High
- sudo project sudo, debian linux, fedoraproject fedora +3 more +5 moreThe sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform...2.5 Low
- 1e clientThe %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote...6.5 Medium
- gdatasoftware g dataAn issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse...9.8 Critical
- opendkimThe test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges...7.8 High
- malwarebytes, malwarebytes endpoint protection +1 moreIn Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system...7.1 High
- datacharmer dbdeployerArbitrary read/write in DBdeployer6.1 Medium
- apple ipados, macos, tvos +4 more +6 moreAn issue existed within the path validation logic for symlinks. This issue was addressed with...7.8 High
- nlnet labs nsd, unbound, debian linux +1 more +3 moreLocal symlink attack in Unbound and NSD5.5 Medium
- hashicorp go-slugUnsafe tar unpacking in HashiCorp go-slug7.5 High
- tp-link archer c9 firmwareUNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an...6.1 Medium
- pritunl pritunl-client-electronPrivilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2...7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ security 2020 +3 more +5 moreTrend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could...7.8 High
- ilex international sign\&goIlex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a...7.8 High
- tp-link archer a7 firmwareUNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated...6.2 Medium
- checkpoint endpoint securityCheck Point Endpoint Security for Windows before E84.10 can reach denial of service during clean...5.5 Medium
- google chrome, debian linux, opensuse backports sle +1 more +3 moreInsufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local...7.8 High
- openrc project openrccheckpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files...5.5 Medium
- openr opentmpfilesopentmpfiles through 0.3.1 allows local users to take ownership of arbitrary files because d...5.5 Medium
- apple ios, ipados, macos +3 more +5 moreAn issue existed within the path validation logic for symlinks. This issue was addressed with...7.8 High
- apple ios, ipados, macos +4 more +6 moreAn issue existed within the path validation logic for symlinks. This issue was addressed with...7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreGroup Policy Elevation of Privilege Vulnerability7.8 High
- trendmicro antivirus, trend micro antivirus for mac (consumer) +1 moreTrend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege...7.8 High
- trend micro officescanA vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to...7.8 High
- pango hotspot shieldImproper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and...7.8 High
- Show moreLoading…