Standard attack pattern
Draft
CAPEC-6: Argument Injection
An attacker changes the behavior or state of a targeted application through injecting data or command syntax through the targets use of non-validated and non-filtered arguments of exposed services or methods.
Last updated
High
Typical severity
Per MITRE
High
Likelihood of attack
Per MITRE
6
Related weaknesses
CWEs this targets
Standard
Abstraction
MITRE classification
Overview
CAPEC-6 (Argument Injection) is a standard-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.