目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

CWE-40 路径遍历：’\UNCsharename'(WindowsUNC共享) 类漏洞列表 4

CWE-40 路径遍历：’\UNCsharename'(WindowsUNC共享) 类弱点 4 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-40 属于路径遍历漏洞，特指 Windows UNC 共享路径场景。攻击者通过构造恶意输入，利用“\\UNC\share\name”格式诱导系统重定向，从而访问非预期的文件或敏感资源。开发者应严格校验输入，禁止直接拼接用户提供的 UNC 路径，并实施最小权限原则，确保应用程序仅能访问授权目录，从而有效阻断此类越权访问风险。

MITRE CWE 官方描述
CWE：CWE-40 路径遍历：'\\UNC\share\name'（Windows UNC 共享） 英文：该产品接受标识 Windows UNC 共享（'\\UNC\share\name'）的输入，该输入可能会将访问重定向到非预期的位置或任意文件。
常见影响 (1)
Confidentiality, IntegrityRead Files or Directories, Modify Files or Directories
缓解措施 (2)
ImplementationAssume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. When performing input validation, consider all potentially relevant properties, including length, type of input, the full range…
Effectiveness: High
ImplementationInputs should be decoded and canonicalized to the application's current internal representation before being validated (CWE-180). Make sure that the application does not decode the same input twice (CWE-174). Such errors could be used to bypass allowlist validation schemes by introducing dangerous inputs after they have been checked.
CVE ID标题CVSS风险等级Published
CVE-2026-27615 ADB Explorer 安全漏洞 — ADB-Explorer 8.8AIHighAI2026-02-25
CVE-2025-32103 CrushFTP 安全漏洞 — CrushFTP 5.0 Medium2025-04-15
CVE-2023-29446 PTC Kepware KEPServerEX 安全漏洞 — Kepware KEPServerEX 4.7 Medium2024-01-10
CVE-2021-44548 Apache Solr 路径遍历漏洞 — Apache Solr 8.8 -2021-12-23

CWE-40（路径遍历：’\UNCsharename'(WindowsUNC共享)） 是常见的弱点类别，本平台收录该类弱点关联的 4 条 CVE 漏洞。