Fallos del tipo CWE-95

196 resultados

Injeção em Código Avaliado Dinamicamente (Eval Injection)

Fraqueza onde entrada do usuário é passada diretamente para funções que executam código dinamicamente (como eval(), exec() ou similar), sem validação ou sanitização prévia. Um atacante injeta comandos maliciosos que são interpretados e executados com os mesmos privilégios da aplicação, resultando em execução remota de código.

Ejemplo

Um aplicativo recebe uma expressão matemática do usuário via URL (ex: ?calc=2+2) e executa eval(request.param('calc')) para retornar o resultado. Um atacante envia ?calc=import('os').system('rm -rf /') e consegue executar comandos no servidor.

Cómo mitigar

Nunca use eval(), exec() ou equivalentes com entrada do usuário. Se precisa avaliar expressões, use parsers seguros ou bibliotecas de sandboxing. Valide e escape rigorosamente qualquer dado dinâmico; melhor ainda: redesenhe para evitar código dinâmico completamente.

CVE-2026-61539CRITICALXinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsingEPSS 0.7%CVE-2026-61667CRITICALDIRAC: RCE in FileCatalog DatasetManager via SQL injection + evalEPSS 0.7%CVE-2025-53837CRITICALorg.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issueEPSS 0.6%CVE-2024-3562HIGHCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom FieldEPSS 0.6%CVE-2026-69253CRITICALFlowise Sandbox Escape to RCEEPSS 0.6%CVE-2025-68271CRITICALUnauthenticated Remote Code Execution in openc3-apiEPSS 0.6%CVE-2026-71867CRITICALOrval: RCE via schema property name -> computed-property-key injection in the MSW mock generatorEPSS 0.6%CVE-2026-71864CRITICALOrval: Import-time RCE via header parameter name -> computed-property-key injection in the zod clientEPSS 0.6%CVE-2026-4965MEDIUMletta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injectionEPSS 0.6%CVE-2023-0888MEDIUMAuthenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi EPSS 0.6%CVE-2025-71361HIGHpicklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tipEPSS 0.6%CVE-2023-26323HIGHXiaomi App Market has a code execution vulnerabilityEPSS 0.6%CVE-2026-15971CRITICALCVE-2026-15971EPSS 0.6%CVE-2025-58365HIGHXWiki Blog Application: Privilege Escalation (PR) from account through blog contentEPSS 0.6%CVE-2020-37137HIGHPHP-Fusion 9.03.50 - 'panels.php' Eval InjectionEPSS 0.6%CVE-2026-46586HIGHApache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code ExecutionEPSS 0.5%CVE-2024-10633HIGHQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via contentEPSS 0.5%CVE-2024-31986CRITICALXWiki Platform CSRF remote code execution through scheduler job's document referenceEPSS 0.5%CVE-2026-8914HIGHCommand injection in Profile change functionEPSS 0.5%CVE-2026-80351CRITICALApache Camel K: Camel K Tenant repositories reach Maven execution inside operator podEPSS 0.5%