ERT-INJECT-012
Unrestricted file upload
HighA05:2025CWE-434
Why it matters
SQL, XSS, SSRF, command and template injection with safe payloads. This check looks specifically for: unrestricted file upload.
How to fix it
Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.
How we test it
Write — creates and deletes canary records; requires verification and explicit opt-in.
Does your app have this problem?
Create a free account and verify your app to test for it.
Scan my app — free