Standard attack pattern
Draft
CAPEC-88: OS Command Injection
In this type of an attack, an adversary injects operating system commands into existing application functions. An application that uses untrusted input to build command strings is vulnerable. An adversary can leverage OS command injection in an application to elevate privileges, execute arbitrary commands and compromise the underlying operating system.
High
Typical severity
Per MITRE
High
Likelihood of attack
Per MITRE
4
Related weaknesses
CWEs this targets
Standard
Abstraction
MITRE classification
Overview
CAPEC-88 (OS Command Injection) is a standard-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.