CWE-1404 · Kategoria
Comprehensive Categorization: File Handling
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to file handling.
Wpisy w tej grupie
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-23 Relative Path Traversal
- CWE-24 Path Traversal: '../filedir'
- CWE-25 Path Traversal: '/../filedir'
- CWE-26 Path Traversal: '/dir/../filename'
- CWE-27 Path Traversal: 'dir/../../filename'
- CWE-28 Path Traversal: '..\filedir'
- CWE-29 Path Traversal: '\..\filename'
- CWE-30 Path Traversal: '\dir\..\filename'
- CWE-31 Path Traversal: 'dir\..\..\filename'
- CWE-32 Path Traversal: '...' (Triple Dot)
- CWE-33 Path Traversal: '....' (Multiple Dot)
- CWE-34 Path Traversal: '....//'
- CWE-35 Path Traversal: '.../...//'
- CWE-36 Absolute Path Traversal
- CWE-37 Path Traversal: '/absolute/pathname/here'
- CWE-38 Path Traversal: '\absolute\pathname\here'
- CWE-39 Path Traversal: 'C:dirname'
- CWE-40 Path Traversal: '\\UNC\share\name\' (Windows UNC Share)
- CWE-41 Improper Resolution of Path Equivalence
- CWE-42 Path Equivalence: 'filename.' (Trailing Dot)
- CWE-43 Path Equivalence: 'filename....' (Multiple Trailing Dot)
- CWE-44 Path Equivalence: 'file.name' (Internal Dot)
- CWE-45 Path Equivalence: 'file...name' (Multiple Internal Dot)
- CWE-46 Path Equivalence: 'filename ' (Trailing Space)
- CWE-47 Path Equivalence: ' filename' (Leading Space)
- CWE-48 Path Equivalence: 'file name' (Internal Whitespace)
- CWE-49 Path Equivalence: 'filename/' (Trailing Slash)
- CWE-50 Path Equivalence: '//multiple/leading/slash'
- CWE-51 Path Equivalence: '/multiple//internal/slash'
- CWE-52 Path Equivalence: '/multiple/trailing/slash//'
- CWE-53 Path Equivalence: '\multiple\\internal\backslash'
- CWE-54 Path Equivalence: 'filedir\' (Trailing Backslash)
- CWE-55 Path Equivalence: '/./' (Single Dot Directory)
- CWE-56 Path Equivalence: 'filedir*' (Wildcard)
- CWE-57 Path Equivalence: 'fakedir/../realdir/filename'
- CWE-58 Path Equivalence: Windows 8.3 Filename
- CWE-59 Improper Link Resolution Before File Access ('Link Following')
- CWE-61 UNIX Symbolic Link (Symlink) Following
- CWE-62 UNIX Hard Link
- CWE-64 Windows Shortcut Following (.LNK)
- CWE-65 Windows Hard Link
- CWE-66 Improper Handling of File Names that Identify Virtual Resources
- CWE-67 Improper Handling of Windows Device Names
- CWE-69 Improper Handling of Windows ::DATA Alternate Data Stream
- CWE-72 Improper Handling of Apple HFS+ Alternate Data Stream Path
Źródła
Wpis z katalogu CWE 4.20.