hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #15720 from RasmusWL/nosql-precision

Browse Source 
Python: Add precision to NoSQL query
This commit is contained in:
yoff
2024-03-04 14:44:46 +01:00
committed by GitHub
parent 569bb991d4 fbf6727809
commit 00e77a3ddb
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
python/ql/src/Security/CWE-943/NoSqlInjection.ql
View File

@@ -3,6 +3,7 @@
* @description Building a NoSQL query from user-controlled sources is vulnerable to insertion of
* malicious NoSQL code by the user.
* @kind path-problem
* @precision high
* @problem.severity error
* @security-severity 8.8
* @id py/nosql-injection

4
python/ql/src/change-notes/2024-03-04-nosql-injection.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: newQuery
---
* The query `py/nosql-injection` for finding NoSQL injection vulnerabilities is now part of the default security suite.