CWE-69: Improper Handling of Windows ::DATA Alternate Data Stream
Filter
The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).
What the weakness is: CWE-69 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-168 Windows ::DATA Alternate Data Stream Severity: Medium
The attack patterns MITRE's CAPEC relates to CWE-69, as MITRE names them. Credits.
Ask an AI about CWE-69
Show the prompt
Explain CWE-69: Improper Handling of Windows ::DATA Alternate Data Stream and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/69.html and https://cve.bz/cve/cwe/69?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.7CVE-2026-52792EPSS 0.6%
Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext() without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., …
- 9.8CVE-2025-3941EPSS 0.5%
Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.…
- 8.8CVE-2024-43033EPSS 1.0%
JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentController#u…