CWE-61: UNIX Symbolic Link (Symlink) Following
The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
Also known as Symlink following, symlink vulnerability.
A kind of CWE-59 insecure temporary file.
From the CWE List. © The MITRE Corporation.
Newest
- dell supportassist for business pcs, supportassist for home pcs +1 moreDell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs...7.1 High
pagureDebianPagure: generate_archive() follows symbolic links in temporary clones8.1 High- gogsGogs has a Path Traversal in file editing UI8.7 High
- dell inventory collector client, inventory collector +1 moreDell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution...7.8 High
- dell appsyncDell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability. A low...4.4 Medium
- dell client platform bios, dock hd22q firmware update utility, dock wd19 firmware update utility +1 more +3 moreDell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability....6.3 Medium
- dest-unreach socatreadline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file.9.8 Critical
- rcloneRclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata5.4 Medium
- cisco roomos, telepresence collaboration endpoint, telepresence endpoint software (tc/ce) +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability5.1 Medium
- cisco roomos software, roomos, telepresence endpoint software (tc/ce) +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability4.4 Medium
- cisco roomos software, roomos, telepresence endpoint software (tc/ce) +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability4.4 Medium
- acronis backup plugin for cpanel & whmSensitive information disclosure during file browsing due to improper soft link handling. The...3.3 Low
- acronis backup extension for plesk, backup plugin for cpanel & whm, backup plugin for directadmin +2 moreArbitrary file overwrite during recovery due to improper soft link handling. The following...5.5 Medium
- nvidia container toolkit, gpu operator +1 moreNVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a...4.1 Medium
- codeclysm extractExtract has insufficient checks allowing attacker to create symlinks outside the extraction directory.6.9 Medium
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...8.8 High
- linuxfoundation runcrunc can be confused to create empty files/directories on the host3.6 Low
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink)...6.3 Medium
- aio-libs aiohttpIn aiohttp, compressed files as symlinks are not protected from path traversal4.8 Medium
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- judge0Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link10.0 Critical
- judge0Judge0 vulnerable to Sandbox Escape via Symbolic Link10.0 Critical
- 360totalsecurity 360 total security, antivirus +1 moreAn issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows...8.8 High
- dell powerscale onefsDell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link (symlink)...6.0 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink)...6.0 Medium
- zscaler client connectorZSATrayManager Arbitrary File Deletion7.3 High
- teamviewer remote clientImproper symlink resolution in TeamViewer Remote client for macOS7.1 High
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma...5.5 Medium
- dell encryption, endpoint security suite enterprise, security management server +1 more +3 moreDell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server...4.6 Medium
- codehaus-plexus plexus-archiverPlexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver8.1 High
- pterodactyl wingsSymbolic Link (Symlink) Following in github.com/pterodactyl/wings8.4 High
- samba, fedoraproject fedora +1 moreA symlink following vulnerability was found in Samba, where a user can create a symbolic link...6.5 Medium
- microsoft binwalkReFirm Labs binwalk Archive Extraction extractor.py symlink5.0 Medium
- argoproj argo cd, argo-cd +1 moreSymlink following allows leaking out-of-bounds YAML files from Argo CD repo-server4.3 Medium
- argoproj argo cd, argo-cd +1 moreSymlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server4.3 Medium
- opensuse factory, factory watchman, backports sle-15-sp3 +2 morewatchman: chown in watchman@.socket unit allows symlink attack7.8 High
- cisco ios xe sd-wan software, sd-wan +1 moreCisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability5.5 Medium
- npm arborist, oracle graalvm, siemens sinec infrastructure network services +2 moreUNIX Symbolic Link (Symlink) Following in @npmcli/arborist8.2 High
- npm arborist, oracle graalvm, siemens sinec infrastructure network services +2 moreUNIX Symbolic Link (Symlink) Following in @npmcli/arborist8.2 High
- opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 moreclone-master-clean-up: dangerous file system operations3.2 Low
- dell storage managerQSAN Storage Manager - UNIX Symbolic Link (Symlink) Following7.5 High
- dell storage managerQSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc function6.5 Medium
- dell storage managerQSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileStreaming function6.5 Medium
- opensuse factory, leap 15.2, suse arpwatch +3 more +5 morearpwatch: Local privilege escalation from runtime user to root7.8 High
- opensuse factory, leap 15.2, python-hyperkitty project python-hyperkitty +2 morepython-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root6.8 Medium
- opensuse factory, leap 15.2, python-postorius +2 morepython-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root6.8 Medium
- openvpn private tunnelPrivate Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical...7.8 High
- canonical apportapport process_report() arbitrary file write5.2 Medium
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- Show moreLoading…