CWE-69: Improper Handling of Windows ::DATA Alternate Data Stream
The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).
A kind of CWE-66 Improper Handling of File Names that Identify Virtual Resources.
From the CWE List. © The MITRE Corporation.
Newest
- xyproto algernon Algernon: Server-side script source disclosure on Windows via NTFS filename 8.7 High
- tridium niagara, niagara enterprise security, niagara framework +2 more Improper Handling of Windows: DATA Alternate Data Stream 5.4 Medium
- jpress JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause... 8.8 High