CWE Top 25 Most Dangerous Software Weaknesses (2024)
CWE Top 25 2024: Injection and Input Handling

CWE Top 25 Most Dangerous Software Weaknesses (2024) CWE-434: Unrestricted Upload of File with Dangerous Type

Rank 10 in the 2024 CWE Top 25 (frequency x severity of CVEs). The software allows the upload of files that can be automatically processed or executed within the product's environment.

Other controls in CWE Top 25 2024: Injection and Input Handling

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.