Fallos del tipo CWE-94

4891 resultados

Injeção de script

A aplicação executa código dinâmico (JavaScript, Python, etc.) construído a partir de entrada do usuário sem validação ou sanitização adequada. Um atacante injeta comandos maliciosos que são interpretados e executados pelo servidor ou navegador como se fossem parte legítima do programa.

Ejemplo

Um formulário de contato concatena o nome do usuário diretamente em um script JavaScript enviado ao navegador: `<script>var usuario = '` + entrada_usuario + `';</script>`. Se o usuário envia `'; alert('xss'); //`, o navegador executa o alerta indesejado.

Cómo mitigar

Nunca construa código dinâmico a partir de entrada de usuário. Use APIs seguras (como `JSON.parse()` ao invés de `eval()`, ou templates com escape automático), valide e sanitize rigorosamente todas as entradas, e aplique listas brancas de caracteres permitidos quando possível.

CVE-2020-8129—An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.EPSS 2.9%CVE-2023-32527—Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary codeEPSS 2.9%CVE-2008-1511CRITICALMultiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PEPSS 2.9%CVE-2021-32829CRITICALPost-authentication Remote Code Execution (RCE) in ZStack REST APIEPSS 2.9%CVE-2026-53753CRITICALCrawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker APIEPSS 2.9%CVE-2023-40621MEDIUMCode Injection vulnerability in SAP PowerDesigner ClientEPSS 2.9%CVE-2022-39833HIGHFileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported APIEPSS 2.9%CVE-2023-43364CRITICALmain.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.EPSS 2.9%CVE-2019-13558—In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of code, which may alloEPSS 2.9%CVE-2024-36622CRITICALIn RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to EPSS 2.8%CVE-2022-25860HIGHVersions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemotEPSS 2.8%CVE-2024-48839CRITICALRemote Code Execution, RCEEPSS 2.8%CVE-2024-10644CRITICALCode injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticatEPSS 2.8%CVE-2021-1362HIGHCisco Unified Communications Products Remote Code Execution VulnerabilityEPSS 2.8%CVE-2006-6975CRITICALPHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a UREPSS 2.8%CVE-2026-4800HIGHlodash vulnerable to Code Injection via `_.template` imports key namesEPSS 2.8%CVE-2024-7627HIGHBit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race ConditionEPSS 2.8%CVE-2024-3105CRITICALWoody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 -Authenticated (Contributor+) Remote Code ExecutionEPSS 2.8%CVE-2023-28706CRITICALApache Airflow Hive Provider Beeline Remote Command ExecutionEPSS 2.8%CVE-2024-9162HIGHAll-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code InjectionEPSS 2.7%