CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')

Description

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

[object Object]

Common consequences

• Integrity,Confidentiality,Availability→Execute Unauthorized Code or Commands
  If a malicious user injects a character (such as a semi-colon) that delimits the end of one command and the beginning of another, it may be possible to then insert an entirely new and unrelated command that was not intended to be executed.

Potential mitigations

• Architecture and Design
  If at all possible, use library calls rather than external processes to recreate the desired functionality.
• Implementation
  If possible, ensure that all external commands called from the program are statically created.
• Implementation
  [object Object]
• Operation
  Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
• System Configuration
  Assign permissions that prevent the user from accessing/opening privileged files.

Related CWEs

Recent CVEs classified under this CWE