Product

SAST
Catch vulnerabilities as you develop DAST
Test live web applications like an attacker SCA
Secure open-source and supply chain MAST
Secure mobile apps from code to store Compliance
Align with standards while shipping secure code

Resources

Vulnerability database Healthy Package

Pricing Partners About Us Log In

Kotlin : Unsafe file upload

Classification

OWASP Top 10 2013 A1-Injection OWASP Top 10 2017 A1-Injection OWASP Top 10 2021 A3-Injection OWASP ASVS Files and Resources Files and Resources PCI DSS 4.0 6.2.4 CWE CWE-1027

Overview

The application receives a file attached to a SOAP-message. This can be exploited to upload malicious data or code to the server.

If users can upload files to a publicly accessible directory, an attacker can use this for remote execution of malicious code on the server.

References

Do you want to fix Kotlin : Unsafe file upload in your application?

DerScanner Severity Score

Do you want to fix Kotlin : Unsafe file upload in your application?

See also

Kotlin : Unsafe external file inclusion

Kotlin : Typo in method name

Kotlin : Deprecated method (ESAPI)