CAPEC-76 Manipulating Web Input to File System Calls

abstraction: detailedstatus: active

An attacker manipulates inputs to the target software which the target software passes to file system calls in the OS. The goal is to gain access to, and perhaps modify, areas of the file system that the target software did not intend to be accessible.

likelihood: Highseverity: Very High
01

weaknesses (11)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.