Common Weakness Enumeration
CWE-1386 Insecure Operation on Windows Junction / Mount Point
Description
The product opens a file or directory, but it does not properly prevent the name from being associated with a junction or mount point to a destination that is outside of the intended control sphere.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1386 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-47xw-vw6m-w9fq | CVE-2023-5834 | LOW |
HashiCorp Vagrant Insecure Operation on Windows Junction / Mount Point vulnerability |
2023-10-31 |