cve.bz

CWE-94: Improper Control of Generation of Code (Code Injection), page 90

Filter

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

Related attack patterns (CAPEC): 3
  • CAPEC-35 Leverage Executable Code in Non-Executable Files Likelihood: High · Severity: Very High
  • CAPEC-77 Manipulating User-Controlled Variables Likelihood: High · Severity: Very High
  • CAPEC-242 Code Injection Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-94, as MITRE names them. Credits.

Ask an AI about CWE-94

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-94: Improper Control of Generation of Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/94.html and https://cve.bz/cve/cwe/94?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2023-27869EPSS 1.6%

    IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted reque…

  2. 8.8CVE-2023-27868EPSS 1.6%

    IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By …

  3. 8.8CVE-2023-27867EPSS 1.6%

    IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection. By sending a specially crafted request using the property clientRerouteS…

  4. 7.2CVE-2023-3551EPSS 1.1%

    Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

  5. 7.2CVE-2023-36992EPSS 1.3%

    PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code.

  6. 9.8CVE-2023-36859EPSS 0.8%

    PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.

  7. 9.8CVE-2023-29382EPSS 1.0%

    An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.

  8. 9.8CVE-2023-30990EPSS 1.0%

    IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036.

  9. 9.8CVE-2023-36258EPSS 1.1%

    An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.

  10. 8.8CVE-2023-33466EPSS 4.2%

    Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploite…

  11. 8.8CVE-2023-33570EPSS 1.1%

    Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).

  12. 9.8CVE-2023-27866EPSS 1.0%

    IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.

  13. 8.8CVE-2023-36467EPSS 1.2%

    AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data.all versions 1.2.0 through 1.5.1 do not prevent remote code execution when a user injects Python commands into the ‘Te…

  14. 8.8CVE-2023-32528EPSS 3.0%

    Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute lo…

  15. 8.8CVE-2023-32527EPSS 2.9%

    Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute lo…

  16. 9.8CVE-2021-31635EPSS 1.2%

    Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.

  17. 7.2CVE-2023-3393EPSS 1.0%

    Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1.

  18. 8.8CVE-2023-35152EPSS 1.0%

    XWiki Platform is a generic wiki platform. Starting in version 12.9-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.1, any logged in user can add dangerous content in their first name field and see it executed with programming rights. L…

  19. 8.0CVE-2023-35150EPSS 78%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and prior to versions 14.4.8, 14.10.4, and 15.0, any user with view rights on any document can execute cod…

  20. 9.9CVE-2023-35926EPSS 1.9%

    Backstage is an open platform for building developer portals. The Backstage scaffolder-backend plugin uses a templating library that requires sandbox, as it by design allows for code injection. The library used for this sandbox so far has …

  21. 7.2CVE-2020-20918EPSS 1.1%

    An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page.

  22. 8.8CVE-2023-26436EPSS 1.3%

    Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during deserialization. Access to this API endpoint is restricted to local networks by default. Arbitrary co…

  23. 8.8CVE-2023-2359EPSS 2.5%

    The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

  24. 9.8CVE-2023-35853EPSS 1.0%

    In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.

  25. 9.8CVE-2023-35813ExploitEPSS 87%

    Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.

  26. 8.8CVE-2023-35809EPSS 1.3%

    An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified in the REST API. By using a crafted request, custom PHP code can be injected through the REST API be…

  27. 7.2CVE-2023-34448EPSS 4.5%

    Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default `filter()` function, did not block other built-in functions …

  28. 7.2CVE-2023-34253EPSS 2.1%

    Grav is a flat-file content management system. Prior to version 1.7.42, the denylist introduced in commit 9d6a2d to prevent dangerous functions from being executed via injection of malicious templates was insufficient and could be easily s…

  29. 7.2CVE-2023-34252EPSS 2.1%

    Grav is a flat-file content management system. Prior to version 1.7.42, there is a logic flaw in the `GravExtension.filterFilter()` function whereby validation against a denylist of unsafe functions is only performed when the argument pass…

  30. 7.2CVE-2023-34251EPSS 2.3%

    Grav is a flat-file content management system. Versions prior to 1.7.42 are vulnerable to server side template injection. Remote code execution is possible by embedding malicious PHP code on the administrator screen by a user with page edi…

  31. 7.8CVE-2023-1049EPSS 0.6%

    A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.

  32. 8.8CVE-2023-33131ExploitEPSS 5.7%

    Microsoft Outlook Remote Code Execution Vulnerability

  33. 5.5CVE-2023-21569EPSS 0.7%

    Azure DevOps Server Spoofing Vulnerability

  34. 9.8CVE-2023-3224EPSS 59%

    Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.

  35. 7.2CVE-2023-30179EPSS 2.2%

    CraftCMS version 3.7.59 is vulnerable to Server-Side Template Injection (SSTI). An authenticated attacker can inject Twig Template to User Photo Location field when setting User Photo Location in User Settings, lead to Remote Code Executio…

  36. 4.4CVE-2023-32546EPSS 0.3%

    Code injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier. If this vulnerability is exploited, a non-administrative user of the Mac where the product is installed may store and obtain audio and image data…

  37. 8.8CVE-2023-25910EPSS 1.0%

    A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7). The affected product co…

  38. 8.8CVE-2023-34468ExploitEPSS 62%

    The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution. The re…

  39. 9.8CVE-2023-35034EPSS 1.3%

    Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.

  40. 7.8CVE-2019-16283EPSS 0.3%

    A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution.

  41. 8.8CVE-2023-34112EPSS 1.9%

    JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the `bytedeco/javacpp-presets` use the `github.event.head_commit.message​` parameter in an insecure way. For example, the commit message …

  42. 9.8CVE-2023-29404EPSS 1.8%

    The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, sp…

  43. 9.8CVE-2023-29402EPSS 1.7%

    The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which uses cgo. This may occur when running an untrusted module which contains directories with newl…

  44. 9.8CVE-2023-34237EPSS 1.7%

    SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remote code execution. Manipulating the Parameters setting in the Notification Script functionality allows code execution wi…

  45. 9.8CVE-2020-36708ExploitEPSS 65%

    The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5…

  46. 9.8CVE-2023-32540EPSS 0.9%

    In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the operating system (including system files), inject code into an XLS file, and modif…

  47. 7.8CVE-2023-33733EPSS 2.1%

    Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

  48. 7.8CVE-2023-27744EPSS 0.8%

    An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution.

  49. 7.8CVE-2022-35743EPSS 1.5%

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  50. 9.8CVE-2023-25539EPSS 1.5%

    Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the appli…