Home / Vulnerability Database / Scala : Unsafe external file inclusion
Scala

Scala : Unsafe external file inclusion

Classification

OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
PCI DSS 4.0

Overview

Data from an untrusted source is used to dynamically include files. This may lead to malicious code execution.

Modern scripting languages allow to dynamically include code from third-party files, which promotes code reuse. This mechanism is often used to maintain the uniform appearance of pages, for code division into smaller units, and similar tasks. File inclusion vulnerabilities occur when the path to the included file is defined based on data from an untrusted source, e.g., user input.

MEDIUM

DerScanner Severity Score

Do you want to fix Scala : Unsafe external file inclusion in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length