This view (slice) displays Sandbox or Jail strategy weaknesses.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| HasMember | Allowed-with-Review | B | 120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') |
| HasMember | Allowed | V | 129 | Improper Validation of Array Index |
| HasMember | Allowed | B | 131 | Incorrect Calculation of Buffer Size |
| HasMember | Allowed | B | 22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| HasMember | Allowed | B | 434 | Unrestricted Upload of File with Dangerous Type |
| HasMember | Allowed | B | 494 | Download of Code Without Integrity Check |
| HasMember | Allowed-with-Review | C | 732 | Incorrect Permission Assignment for Critical Resource |
| HasMember | Allowed | B | 78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
| HasMember | Allowed | B | 805 | Buffer Access with Incorrect Length Value |
| HasMember | Allowed | B | 829 | Inclusion of Functionality from Untrusted Control Sphere |
| HasMember | Allowed | V | 98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') |
This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Use this View or other Views to search and navigate for the appropriate weakness.
| Stakeholder | Description |
|---|