Reliance on File Name or Extension of Externally-Supplied File

Properties

id: d3f:CWE-646

name: Reliance on File Name or Extension of Externally-Supplied File
definition: The product allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors. This could be used by attackers to cause the file to be misclassified and processed in a dangerous fashion.

CWE-646 has no direct neighbors in this release.

This page is experimental and may change significantly in future releases.

No related defensive techniques in this release.

CWE-646 has no related weaknesses in this release.

No related offensive techniques in this release.