cve.bz

CWE-94: Improper Control of Generation of Code (Code Injection), page 92

Filter

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

Related attack patterns (CAPEC): 3
  • CAPEC-35 Leverage Executable Code in Non-Executable Files Likelihood: High · Severity: Very High
  • CAPEC-77 Manipulating User-Controlled Variables Likelihood: High · Severity: Very High
  • CAPEC-242 Code Injection Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-94, as MITRE names them. Credits.

Ask an AI about CWE-94

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-94: Improper Control of Generation of Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/94.html and https://cve.bz/cve/cwe/94?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.3CVE-2022-3960EPSS 0.5%

    Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of the Community Dashboard Editor (CDE) plugin.

  2. 7.2CVE-2022-43769KEVExploitEPSS 98%

    Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

  3. 9.8CVE-2023-26119EPSS 2.5%

    Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.

  4. 9.8CVE-2023-1773EPSS 1.6%

    A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The a…

  5. 9.8CVE-2023-25261EPSS 1.9%

    Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023.1.4 and Stimulsoft Designer (Web) 2023.1.3 and Stimulsoft Viewer (Web) 2023.1.3. Access to the local file system is no…

  6. 7.2CVE-2023-24835EPSS 0.9%

    Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability to execute arbitrary system command to …

  7. 7.8CVE-2022-38745EPSS 0.9%

    Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

  8. 9.8CVE-2023-28333EPSS 1.2%

    The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).

  9. 7.5CVE-2023-24709ExploitEPSS 44%

    An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters.

  10. 8.8CVE-2023-1306EPSS 1.2%

    An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution. This issue was resolved in the Managed and SaaS deployments on February …

  11. 8.8CVE-2023-1304EPSS 1.1%

    An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS depl…

  12. 7.8CVE-2023-1250EPSS 0.3%

    Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Edition (ACL modules) allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via ma…

  13. 8.8CVE-2023-1482EPSS 0.8%

    A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to …

  14. 9.8CVE-2023-0598EPSS 0.6%

    GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path an…

  15. 9.8CVE-2023-24795EPSS 1.0%

    Command execution vulnerability was discovered in JHR-N916R router firmware version<=21.11.1.1483.

  16. 9.8CVE-2023-25344EPSS 1.0%

    An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.

  17. 8.8CVE-2023-27893EPSS 1.2%

    An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems (ST-PI) - versions 2088_1_700, 2008_1_710, 740, can use a vulnerable interface …

  18. 3.8CVE-2023-1367EPSS 0.4%

    Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

  19. 7.2CVE-2023-0888EPSS 0.6%

    An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An aut…

  20. 9.8CVE-2023-1287EPSS 1.0%

    An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.

  21. 7.8CVE-2023-27986EPSS 0.5%

    emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90.

  22. 9.8CVE-2023-1283EPSS 1.1%

    Code Injection in GitHub repository builderio/qwik prior to 0.21.0.

  23. 9.8CVE-2023-22889EPSS 1.3%

    SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users.

  24. 9.8CVE-2023-0090EPSS 0.7%

    The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such…

  25. 8.8CVE-2023-0089EPSS 0.7%

    The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below.

  26. 7.8CVE-2023-1003EPSS 0.4%

    A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached l…

  27. 9.8CVE-2021-36394EPSS 7.0%

    In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.

  28. 9.8CVE-2023-24776EPSS 1.4%

    Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.

  29. 7.8CVE-2023-26107EPSS 0.4%

    All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.

  30. 9.8CVE-2022-45553EPSS 1.1%

    An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the UART port.

  31. 8.8CVE-2023-22381EPSS 0.8%

    A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single environment variable value in GitHub Actions when using a Windows based runner. To exploit this vu…

  32. 9.8CVE-2023-26477EPSS 75%

    XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and 6.2.4, it's possible to inject arbitrary wiki syntax including Groovy, Python and Velocity script macros via the `newThemeName` request parameter (URL parameter),…

  33. 9.8CVE-2023-1097EPSS 1.1%

    Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The followin…

  34. 8.8CVE-2023-23496EPSS 0.9%

    The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to ar…

  35. 5.1CVE-2023-1030EPSS 0.7%

    A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST P…

  36. 7.8CVE-2023-1005EPSS 0.4%

    A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disc…

  37. 7.8CVE-2023-1004EPSS 0.4%

    A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local…

  38. 9.8CVE-2023-24114EPSS 1.4%

    typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php.

  39. 9.8CVE-2023-24107EPSS 1.2%

    hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user informati…

  40. 9.8CVE-2023-25657EPSS 1.5%

    Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions earlier than 1.5.7 are impacted by a remote code execution vulnerability. Nautobot did not properly sandbox Jinja2 template rendering. In…

  41. 8.8CVE-2022-46836EPSS 1.1%

    PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable …

  42. 9.8CVE-2021-26277EPSS 0.3%

    The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.

  43. 9.8CVE-2021-33949EPSS 1.0%

    An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function.

  44. 8.8CVE-2023-24078ExploitEPSS 53%

    Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the component /FuguHub/cmsdocs/.

  45. 8.8CVE-2023-0877EPSS 3.9%

    Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.

  46. 9.8CVE-2023-22855ExploitEPSS 15%

    Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisati…

  47. 7.5CVE-2023-21553EPSS 1.4%

    Azure DevOps Server Remote Code Execution Vulnerability

  48. 9.8CVE-2023-25717KEVExploitEPSS 98%

    Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

  49. 9.8CVE-2023-23551EPSS 0.9%

    Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.

  50. 5.4CVE-2023-0792EPSS 0.6%

    Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.