CWE-434
Overview
- CWE ID
- 434
- CWE Name
- Unrestricted Upload of File with Dangerous Type
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.