CWE-433

Overview
  • CWE ID
  • 433
  • CWE Name
  • Unparsed Raw Web Content Delivery
  • CWE Abstraction
  • Variant
  • CWE structure
  • Simple
  • CWE Status
  • Incomplete
Description
The software stores raw content or supporting code under the web document root with an extension that is not specifically handled by the server.
Extended Description
If code is stored in a file with an extension such as ".inc" or ".pl", and the web server does not have a handler for that extension, then the server will likely send the contents of the file directly to the requester without the pre-processing that was e
Related CWEs
CWE ID View ID Nature Ordinal
219 1000 ChildOf Primary