Weakness (CWE)

CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Base Incomplete

The product allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors.

More detail

This could be used by attackers to cause the file to be
misclassified and processed in a dangerous fashion, causing
the wrong action to occur.

How to prevent it (1 mitigation)

Architecture and Design

Make decisions on the server side based on file content and not on file name or extension.

Nothing found.