CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ96

VerifiedSecure Software Concepts

Which vulnerability arises when an application directly uses, or concatenates, potentially hostile input with data file or stream functions?

Explanation

Malicious file execution occurs when untrusted input is incorporated directly into file or stream function calls, enabling an attacker to manipulate the file or resource the application accesses or executes.

Community Discussion

No comments yet. Be the first to start the discussion!