Improper Neutralization of Special Elements used in a Command ('Command Injection')
Weakness · CWE-77
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "CWE-77",
"title": "Improper Neutralization of Special Elements used in a Command ('Command Injection')",
"type": "Weakness",
"source_url": "https://cwe.mitre.org/data/definitions/77.html",
"snapshot": "cwe.xml",
"status": "Draft",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"abstraction": "Class",
"source_version": "4.20"
}Explicit source assertions (9)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
CAPEC-136 → related_weakness → CWE-77
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='136']/Related_Weaknesses
CAPEC-15 → related_weakness → CWE-77
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='15']/Related_Weaknesses
CAPEC-183 → related_weakness → CWE-77
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='183']/Related_Weaknesses
CAPEC-248 → related_weakness → CWE-77
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='248']/Related_Weaknesses
CAPEC-40 → related_weakness → CWE-77
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='40']/Related_Weaknesses
CAPEC-43 → related_weakness → CWE-77
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='43']/Related_Weaknesses
CAPEC-75 → related_weakness → CWE-77
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='75']/Related_Weaknesses
CAPEC-76 → related_weakness → CWE-77
CAPEC: Catalog mapping; does not establish an incident or actor use
Assertion source · Locator: Attack_Pattern[@ID='76']/Related_Weaknesses
CVE-2024-3400 → reported_weakness → CWE-77
palo_alto: Container-specific classification; CNA and ADP assertions retained separately
Assertion source · Locator: containers.cna.problemTypes[0].descriptions[0]