Common Weakness Enumeration

    CWE Definition / CWE-535

    CWE-535: Exposure of Information Through Shell Error Message

    A command shell error message indicates that there exists an unhandled exception in the web application code. In many cases, an attacker can leverage the conditions that cause these errors in order to gain unauthorized access to the system.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-211: Externally-Generated Error Message Containing Sensitive Information

    CWE-535: Exposure of Information Through Shell Error Message | CVE-DB