cve.bz

CWE-94: Improper Control of Generation of Code (Code Injection), page 86

Filter

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

Related attack patterns (CAPEC): 3
  • CAPEC-35 Leverage Executable Code in Non-Executable Files Likelihood: High · Severity: Very High
  • CAPEC-77 Manipulating User-Controlled Variables Likelihood: High · Severity: Very High
  • CAPEC-242 Code Injection Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-94, as MITRE names them. Credits.

Ask an AI about CWE-94

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-94: Improper Control of Generation of Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/94.html and https://cve.bz/cve/cwe/94?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2023-50721EPSS 79%

    XWiki Platform is a generic wiki platform. Starting in 4.5-rc-1 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the search administration interface doesn't properly escape the id and label of search user interface extensions, allowi…

  2. 6.5CVE-2023-6051EPSS 0.6%

    An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installa…

  3. 5.7CVE-2023-5512EPSS 0.5%

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML…

  4. 9.8CVE-2023-6553ExploitEPSS 98%

    The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an …

  5. 9.8CVE-2023-48390EPSS 1.1%

    Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service.

  6. 4.3CVE-2023-50710EPSS 0.6%

    Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unin…

  7. 9.8CVE-2023-48085EPSS 76%

    Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.

  8. 9.8CVE-2023-43364EPSS 2.9%

    main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.

  9. 8.8CVE-2023-42890EPSS 3.2%

    The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 10.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2. Processing web content may lead to arbitrary code execution.

  10. 8.8CVE-2023-5500EPSS 1.0%

    This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.

  11. 8.2CVE-2023-43301EPSS 0.6%

    An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.

  12. 7.8CVE-2023-6288EPSS 0.3%

    Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLIB_INSERT_LIBRARIES environment variable.

  13. 9.8CVE-2023-49070ExploitEPSS 95%

    Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10.  Users are recommended to upgrade to version 18.12.10

  14. 8.8CVE-2023-5762EPSS 2.0%

    The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE (Remote Code Execution) vulnerability, which allows the operating system to execute commands and fully compromise the server on behalf of a user with Author-level privilege…

  15. 8.8CVE-2023-49093EPSS 2.4%

    HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0

  16. 9.1CVE-2023-44382EPSS 0.9%

    October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated backend user with the `editor.cms_pages`, `editor.cms_layouts`, or `editor.cms_partials` permissions who would normally not…

  17. 4.9CVE-2023-44381EPSS 0.5%

    October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated backend user with the `editor.cms_pages`, `editor.cms_layouts`, or `editor.cms_partials` permissions who would normally not…

  18. 7.5CVE-2023-5226EPSS 0.5%

    An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited bra…

  19. 9.8CVE-2022-42541EPSS 0.6%

    Remote code execution

  20. 7.8CVE-2023-49314EPSS 4.3%

    Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r …

  21. 9.8CVE-2023-49313EPSS 1.3%

    A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized acces…

  22. 9.8CVE-2023-46480EPSS 1.6%

    An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.

  23. 9.8CVE-2023-5604EPSS 2.0%

    The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), po…

  24. 7.2CVE-2021-22150EPSS 1.2%

    It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands…

  25. 9.8CVE-2023-48699EPSS 0.7%

    fastbots is a library for fast bot and scraper development using selenium and the Page Object Model (POM) design. Prior to version 0.1.5, an attacker could modify the locators.ini locator file with python code that without proper validatio…

  26. 9.8CVE-2023-6248EPSS 1.2%

    The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service. The MQTT server also leaks…

  27. 3.5CVE-2023-48226EPSS 0.8%

    OpenReplay is a self-hosted session replay suite. In version 1.14.0, due to lack of validation Name field - Account Settings (for registration looks like validation is correct), a bad actor can send emails with HTML injected code to the vi…

  28. 7.8CVE-2023-48192EPSS 0.3%

    An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.

  29. 6.1CVE-2023-40809EPSS 0.5%

    OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.

  30. 9.8CVE-2023-6188EPSS 1.0%

    A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated rem…

  31. 9.8CVE-2023-6016EPSS 31%

    An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.

  32. 9.8CVE-2023-47003EPSS 1.1%

    An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial of service via a crafted string in DataBlock_ItemIsDeleted.

  33. 8.8CVE-2023-47444EPSS 1.8%

    An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on t…

  34. 8.8CVE-2023-48217EPSS 1.1%

    Statamic is a flat-first, Laravel + Git powered CMS designed for building websites. In affected versions certain additional PHP files crafted to look like images may be uploaded regardless of mime type validation rules. This affects front-…

  35. 8.8CVE-2023-36437EPSS 2.0%

    Azure DevOps Server Remote Code Execution Vulnerability

  36. 8.8CVE-2023-6131EPSS 1.0%

    Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

  37. 9.8CVE-2023-6126EPSS 0.7%

    Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

  38. 8.8CVE-2023-6125EPSS 0.8%

    Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

  39. 7.5CVE-2023-45560EPSS 0.7%

    An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.

  40. 7.3CVE-2023-36014EPSS 1.4%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  41. 9.8CVE-2023-5550EPSS 1.6%

    In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve rem…

  42. 8.8CVE-2023-5540EPSS 2.3%

    A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.

  43. 8.8CVE-2023-5539EPSS 2.2%

    A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.

  44. 9.8CVE-2023-47397EPSS 1.0%

    WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.

  45. 9.8CVE-2023-45849EPSS 1.1%

    An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner.

  46. 8.8CVE-2023-46243EPSS 1.0%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a user to execute any content with the right of an existing document's content author, provided…

  47. 8.8CVE-2023-46242EPSS 0.4%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execute a content with the right of any user via a crafted URL. A user must have `programming` p…

  48. 7.2CVE-2023-46845EPSS 1.6%

    EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability due to improper settings of the template engine Twig included in the product. A…

  49. 9.8CVE-2023-46731EPSS 89%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section URL parameter that is used in the code for displaying administration sections. This allows a…

  50. 9.8CVE-2023-46980EPSS 1.5%

    An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter.