Detail Kategori CWE-893

CWE-893

SFP Primary Cluster: Path Resolution
2012-05-14 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: SFP Primary Cluster: Path Resolution

This category identifies Software Fault Patterns (SFPs) within the Path Resolution cluster (SFP16, SFP17, SFP18).

Daftar Anggota CWE

CWE-981: This category identifies Software Fault Patterns (SFPs) within the Path Traversal cluster (SFP16).
CWE-22: Improper Limitation of a Pathname to a Restricted Directory Dasar
CWE-23: Relative Path Traversal Dasar
CWE-24: Path Traversal: '../filedir' Dasar
CWE-25: Path Traversal: '/../filedir' Dasar
CWE-26: Path Traversal: '/dir/../filename' Dasar
CWE-27: Path Traversal: 'dir/../../filename' Dasar
CWE-28: Path Traversal: '..\filedir' Dasar
CWE-29: Path Traversal: '\..\filename' Dasar
CWE-30: Path Traversal: '\dir\..\filename' Dasar
CWE-31: Path Traversal: 'dir\..\..\filename' Dasar
CWE-32: Path Traversal: '...' (Triple Dot) Dasar
CWE-33: Path Traversal: '....' (Multiple Dot) Dasar
CWE-34: Path Traversal: '....//' Dasar
CWE-35: Path Traversal: '.../...//' Dasar
CWE-36: Absolute Path Traversal Dasar
CWE-37: Path Traversal: '/absolute/pathname/here' Dasar
CWE-38: Path Traversal: '\absolute\pathname\here' Dasar
CWE-39: Path Traversal: 'C:dirname' Dasar
CWE-40: Path Traversal: '\\UNC\share\name\' (Windows UNC Share) Dasar
CWE-41: Improper Resolution of Path Equivalence Dasar
CWE-42: Path Equivalence: 'filename.' (Trailing Dot) Dasar
CWE-428: Unquoted Search Path or Element Dasar
CWE-43: Path Equivalence: 'filename....' (Multiple Trailing Dot) Dasar
CWE-44: Path Equivalence: 'file.name' (Internal Dot) Dasar
CWE-45: Path Equivalence: 'file...name' (Multiple Internal Dot) Dasar
CWE-46: Path Equivalence: 'filename ' (Trailing Space) Dasar
CWE-47: Path Equivalence: ' filename' (Leading Space) Dasar
CWE-48: Path Equivalence: 'file name' (Internal Whitespace) Dasar
CWE-49: Path Equivalence: 'filename/' (Trailing Slash) Dasar
CWE-50: Path Equivalence: '//multiple/leading/slash' Dasar
CWE-51: Path Equivalence: '/multiple//internal/slash' Dasar
CWE-52: Path Equivalence: '/multiple/trailing/slash//' Dasar
CWE-53: Path Equivalence: '\multiple\\internal\backslash' Dasar
CWE-54: Path Equivalence: 'filedir\' (Trailing Backslash) Dasar
CWE-55: Path Equivalence: '/./' (Single Dot Directory) Dasar
CWE-56: Path Equivalence: 'filedir*' (Wildcard) Dasar
CWE-57: Path Equivalence: 'fakedir/../realdir/filename' Dasar
CWE-58: Path Equivalence: Windows 8.3 Filename Dasar
CWE-66: Improper Handling of File Names that Identify Virtual Resources Dasar
CWE-67: Improper Handling of Windows Device Names Dasar
CWE-706: Use of Incorrectly-Resolved Name or Reference Dasar
CWE-72: Improper Handling of Apple HFS+ Alternate Data Stream Path Dasar
CWE-73: External Control of File Name or Path Dasar

Informasi CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Komentar : See member weaknesses of this category.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2012-03-22 +00:00 2012-05-14 +00:00 2.2

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2013-07-17 +00:00 updated Related_Attack_Patterns
CWE Content Team MITRE 2014-07-30 +00:00 updated Name, Relationships
CWE Content Team MITRE 2017-11-08 +00:00 updated Related_Attack_Patterns
CWE Content Team MITRE 2020-02-24 +00:00 updated Description
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.