CWE-77
Overview
- CWE ID
- 77
- CWE Name
- Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE Abstraction
- Class
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream co