CWE-62: UNIX Hard Link
The product, when opening a file or directory, does not sufficiently account for when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
A kind of CWE-59 insecure temporary file.
From the CWE List. © The MITRE Corporation.
Newest
- debian apt APT RCE via hard link reuse 7.7 High
- tox-dev filelock filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record 6.1 Medium
- aisarlabs zeptoclaw ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink 8.8 High
- parallels desktop for mac, desktop +1 more A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop... 7.8 High
- parallels desktop for mac, desktop +1 more A privilege escalation vulnerability exists in the virtual machine archive restoration... 7.8 High
- sap scimono Remote Code Execution in SCIMono 8.1 High