CWE-94
Overview
- CWE ID
- 94
- CWE Name
- Improper Control of Generation of Code ('Code Injection')
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segmen