CWE-59

Medium likelihood

Improper Link Resolution Before File Access ('Link Following')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

1,613 vulnerabilities with CWE-59
CVE-2023-47192 HIGH
Trend Micro Apex One - Privilege Escalation via Agent Link Vulnerability
CVSS 7.8
CVE-2023-6336 HIGH
HYPR Workforce Access <8.7 - Path Traversal
CVSS 7.2
CVE-2023-6335 MEDIUM
HYPR Workforce Access <8.7 - Path Traversal
CVSS 6.4
CVE-2023-42137 HIGH
PAX PayDroid < 8.1.0_sagittarius_11.1.50_20230614 - Authenticated Privilege Escalation via Symlink Attack
CVSS 7.8
CVE-2023-31003 HIGH
IBM Security Verify Access - Privilege Escalation
CVSS 8.4
CVE-2023-51654 MEDIUM
Brother iPrint&Scan < 11.0.0 - Denial of Service via Symlink Attack
CVSS 5.5
CVE-2023-28872 HIGH
NCP Secure Enterprise Client <13.10 - RCE
CVSS 8.8
CVE-2023-43116 HIGH
Buildkite Elastic CI - Privilege Escalation
CVSS 7.8
CVE-2023-36391 HIGH
Local Security Authority Subsystem Service - Privilege Escalation
CVSS 7.8
CVE-2023-35633 HIGH
Windows 10 1507 < 10.0.10240.20345 - Privilege Escalation via Improper Link Resolution
CVSS 7.8
CVE-2023-35624 HIGH
Azure Connected Machine Agent < 1.37 - Elevation of Privilege via Improper Link Resolution
CVSS 7.3
CVE-2023-28871 MEDIUM
NCP Secure Enterprise Client <12.22 - Info Disclosure
CVSS 4.3
CVE-2023-28869 MEDIUM
NCP Secure Enterprise Client <12.22 - Info Disclosure
CVSS 6.5
CVE-2023-28868 HIGH
NCP Secure Enterprise Client <12.22 - Privilege Escalation
CVSS 8.1
CVE-2023-39246 MEDIUM
Dell Endpoint Security Suite Enterprise < 11.8.1 - Privilege Escalation via Windows Junction
CVSS 4.6
CVE-2023-43590 HIGH
Zoom Rooms for macOS <5.16.0 - Privilege Escalation
CVSS 7.8
CVE-2023-36705 HIGH
Windows Installer < - Privilege Escalation
CVSS 7.8
CVE-2023-36399 HIGH
Windows Storage - Privilege Escalation
CVSS 7.1
CVE-2023-36394 HIGH
Windows Search Service - Privilege Escalation
CVSS 7.0
CVE-2023-36047 HIGH
Windows 10/11 Elevation of Privilege via Improper Link Resolution
CVSS 7.8
CVE-2023-36046 HIGH
Windows 11/Server 2022 DoS via Improper Link Resolution
CVSS 7.1
CVE-2023-6069 CRITICAL
GitHub froxlor/froxlor <2.1.0 - Info Disclosure
CVSS 9.9
CVE-2023-5834 LOW
HashiCorp Vagrant < 2.4.0 - Unauthorized File System Writes via Windows Junction
CVSS 3.8
CVE-2023-42844 HIGH
macOS 12.0.0-12.7.1 - Unprotected User Data Exposure via Symlink Resolution
CVSS 7.5
CVE-2023-46655 MEDIUM
Jenkins CloudBees CD Plugin <1.1.32 - Path Traversal
CVSS 6.5
Details
Vulnerabilities 1,613
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits