CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection').

Type

Reference work

Intellectual base

Reference work

Link

no authoritative link yet

Cited by

1 citation across 1 artifact.

Mechanisms

• Structured Command Construction
  • Its strength is that it eliminates the string-concatenation surface injection depends on, and it works for targets that offer no parameter binding at all — shells, paths, HTTP APIs, agent tool calls — which makes it the standard defense against OS command injection.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Registry ID ref:e8106c20d14c · see in the full table