CWE-96
Overview
- CWE ID
- 96
- CWE Name
- Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before inserting the input into an executable resource, such as a library, configuration file, or template.
Extended Description
Related CWEs
| CWE ID | View ID | Nature | Ordinal |
|---|---|---|---|
| 94 | 1000 | ChildOf | Primary |