CWE-59

Medium likelihood

Improper Link Resolution Before File Access ('Link Following')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

1,463 vulnerabilities with CWE-59
CVE-2024-12216 HIGH
Pypi Gluoncv - Symlink Following
CVSS 7.1
CVE-2024-10986 HIGH
Binary-husky Gpt Academic - Symlink Following
CVSS 8.8
CVE-2024-45418 MEDIUM
Zoom <6.1.5 - Privilege Escalation
CVSS 5.4
CVE-2024-57728 HIGH KEV
Simple-help Simplehelp < 5.5.8 - Symlink Following
CVSS 7.2
CVE-2024-52050 HIGH
Trend Micro Apex One - Privilege Escalation
CVSS 7.8
CVE-2024-13043 HIGH
Panda Security Dome - Privilege Escalation
CVSS 7.8
CVE-2024-12753 HIGH
Foxit Pdf Editor < 11.2.11.54113 - Symlink Following
CVSS 7.3
CVE-2024-12754 MEDIUM
Anydesk - Symlink Following
CVSS 5.5
CVE-2024-52535 HIGH
Dell Supportassist For Business Pcs < 4.5.1 - Symlink Following
CVSS 7.1
CVE-2024-44211 MEDIUM
Apple Macos - Symlink Following
CVSS 5.5
CVE-2024-47480 HIGH
Dell Inventory Collector Client <12.7.0 - Privilege Escalation
CVSS 7.8
CVE-2024-52542 MEDIUM
Dell Appsync < 4.6.0.3 - Symlink Following
CVSS 4.4
CVE-2024-56074 MEDIUM
gitingest <9996a06 - Path Traversal
CVSS 5.5
CVE-2024-12552 HIGH
Wacom Center - Symlink Following
CVSS 7.8
CVE-2024-49107 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20857 - Symlink Following
CVSS 7.3
CVE-2024-49059 HIGH
Microsoft 365 Apps - Race Condition
CVSS 7.0
CVE-2024-52537 MEDIUM
Dell Dock Hd22q Firmware Update Utility < 1.00.23 - Symlink Following
CVSS 6.3
CVE-2024-37143 CRITICAL
Dell Data Lakehouse < 1.2.0.0 - Symlink Following
CVSS 10.0
CVE-2024-53691 HIGH
Qnap Qts - Symlink Following
CVSS 8.8
CVE-2024-50404 HIGH
Qnap Qsync Central < 4.4.0.16 - Symlink Following
CVSS 8.8
CVE-2024-22038 HIGH
obs-scm-bridge - Info Disclosure/DoS
CVSS 7.3
CVE-2024-7243 HIGH
Pandasecurity Panda Dome - Symlink Following
CVSS 7.8
CVE-2024-7242 HIGH
Pandasecurity Panda Dome - Symlink Following
CVSS 7.8
CVE-2024-7241 HIGH
Pandasecurity Panda Dome - Symlink Following
CVSS 7.8
CVE-2024-7240 HIGH
F-secure Total - Symlink Following
CVSS 7.8
Details
Vulnerabilities 1,463
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits