Fallos del tipo CWE-78

4627 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2023-23777HIGHAn improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0EPSS 1.3%CVE-2026-81669HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.3%CVE-2025-62193CRITICALNOAA PMEL Live Access Server (LAS) PyFerret command injectionEPSS 1.3%CVE-2022-45145CRITICALegg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egEPSS 1.3%CVE-2024-3126HIGHCommand Injection in parisneo/lollms-webuiEPSS 1.3%CVE-2024-42057HIGHA command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series fEPSS 1.3%CVE-2026-48719HIGHWarp branch selector command injection via Git branch namesEPSS 1.3%CVE-2024-6917CRITICALRCE in Veribilim Software's Veribase Order ManagementEPSS 1.3%CVE-2023-37292CRITICALHGiga iSherlock - Command InjectionEPSS 1.3%CVE-2026-90770HIGHSpug through 3.4.0 Remote Code Execution via ping_checkEPSS 1.3%CVE-2025-48069MEDIUMejson2env has insufficient input sanitizationEPSS 1.3%CVE-2026-12104HIGHAuthenticated OS Command Injection in BondixEPSS 1.3%CVE-2023-22815MEDIUMPost-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devicesEPSS 1.3%CVE-2023-25313CRITICALOS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the viEPSS 1.3%CVE-2026-41315CRITICALmdserver-web: Missing Authorization and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')EPSS 1.3%CVE-2024-50393HIGHQTS, QuTS heroEPSS 1.3%CVE-2026-45629CRITICALDokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket EndpointEPSS 1.3%CVE-2026-0786HIGHALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-5416HIGHCommand Injection via name parameterEPSS 1.3%CVE-2023-24816MEDIUMset_term_title command injection in ipythonEPSS 1.3%