Falhas do tipo CWE-95

224 resultados

Injeção em Código Avaliado Dinamicamente

Ocorre quando a aplicação passa dados não validados para funções que executam código dinamicamente (como eval(), exec() ou similar), permitindo que um atacante injete e execute comandos arbitrários. O risco é crítico porque a execução é feita com os mesmos privilégios da aplicação, podendo resultar em comprometimento total do sistema.

Exemplo

Um formulário web que avalia expressões matemáticas usando eval(input_usuario) sem sanitização. Um atacante envia 'import os; os.system("rm -rf /")' em vez de uma expressão legítima, e o servidor executa o comando malicioso diretamente.

Como mitigar

Nunca use eval() ou funções equivalentes com entrada do usuário. Use parsers específicos do domínio (para expressões matemáticas, por exemplo) ou whitelist rigorosa de caracteres permitidos. Se absolutamente necessário avaliar código, isole a execução em um sandbox com permissões mínimas e valide/sanitize agressivamente antes de qualquer avaliação.

CVE-2025-68271CRITICALUnauthenticated Remote Code Execution in openc3-apiEPSS 0.6%CVE-2024-3562HIGHCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom FieldEPSS 0.6%CVE-2026-77810CRITICALCode Injection via Gremlin Query Passthrough in Amazon Athena Neptune ConnectorEPSS 0.6%CVE-2026-4965MEDIUMletta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injectionEPSS 0.6%CVE-2020-37137HIGHPHP-Fusion 9.03.50 - 'panels.php' Eval InjectionEPSS 0.6%CVE-2026-115943CRITICALSpreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmtEPSS 0.6%CVE-2023-0888MEDIUMAuthenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi EPSS 0.6%CVE-2026-78847CRITICALAn issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matter wEPSS 0.6%CVE-2025-58365HIGHXWiki Blog Application: Privilege Escalation (PR) from account through blog contentEPSS 0.6%CVE-2023-26323HIGHXiaomi App Market has a code execution vulnerabilityEPSS 0.6%CVE-2024-10633HIGHQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via contentEPSS 0.6%CVE-2026-85165HIGHn8n before 2.36.2 Expression Sandbox Bypass via SpreadElementEPSS 0.6%CVE-2026-86002CRITICALDokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGSEPSS 0.6%CVE-2026-13048HIGHData::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filenameEPSS 0.6%CVE-2026-53875HIGHpicklescan - Scanning Bypass via Dynamic Eval in scan_pytorchEPSS 0.6%CVE-2024-31986CRITICALXWiki Platform CSRF remote code execution through scheduler job's document referenceEPSS 0.5%CVE-2026-82789HIGHAn improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If explEPSS 0.5%CVE-2025-40943CRITICALAffected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineeringEPSS 0.5%CVE-2026-8914HIGHCommand injection in Profile change functionEPSS 0.5%CVE-2026-45406CRITICALDokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through evalEPSS 0.5%