236
CanPrecede 434 Unrestricted Upload of File with Dangerous Type 1048
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1015 Limit Access 2430
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 399 Resource Management Errors 2324
Relevant to the view "Seven Pernicious Kingdoms" (CWE-700)
Nature Type ID Name Page
ChildOf 20 Improper Input Validation 20
Weakness Ordinalities
Primary :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Unix (Prevalence = Often)
Operating_System : Windows (Prevalence = Often)
Operating_System : macOS (Prevalence = Often)
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Integrity
Confidentiality
Read Files or Directories
Modify Files or Directories
The application can operate on unexpected files.
Confidentiality is violated when the targeted filename is not
directly readable by the attacker.
Integrity Modify Files or Directories
CWE Version 4.14
CWE-73: External Control of File Name or Path
CWE-73: External Control of File Name or Path