CWE-59Improper Link Resolution Before File Access ('Link Following')

Description

Common consequences· 2

• Confidentiality / Integrity / Access Control — Read Files or Directories, Modify Files or Directories, Bypass Protection Mechanism
  An attacker may be able to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. If the files are used for a security mechanism then an attacker may be able to bypass the mechanism.
• Other — Execute Unauthorized Code or Commands
  Windows simple shortcuts, sometimes referred to as soft links, can be exploited remotely since a ".LNK" file can be uploaded like a normal file. This can enable remote execution.

Potential mitigations· 1

• [Architecture and Design]

Related CAPEC attack patterns· 4

Exploits (incoming)4

(incoming)49

Showing top 30 of 49 by confidence. Click any target to see the full neighbourhood.

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.