Home / Vulnerability Database / Scala : Unsafe external file inclusion
Scala
Scala : Unsafe external file inclusion
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
OWASP ASVS
PCI DSS 4.0
CWE
Overview
Data from an untrusted source is used to dynamically include files. This may lead to malicious code execution.
Modern scripting languages allow to dynamically include code from third-party files, which promotes code reuse. This mechanism is often used to maintain the uniform appearance of pages, for code division into smaller units, and similar tasks. File inclusion vulnerabilities occur when the path to the included file is defined based on data from an untrusted source, e.g., user input.
MEDIUM
DerScanner Severity Score
Do you want to fix Scala : Unsafe external file inclusion in your application?
See also
Scala
Scala : Unreleased resource stream
Scala
Scala : Multiple loggers in same class
Scala
