Change @security-severity for log injection queries from 7.8 to 6.1

2026-03-31 12:48:17 +02:00 · 2026-03-13 10:02:01 +00:00
parent f58a6e5d3a
commit 056aa342fe
5 changed files with 5 additions and 5 deletions
--- a/java/ql/src/Security/CWE/CWE-117/LogInjection.ql
+++ b/java/ql/src/Security/CWE/CWE-117/LogInjection.ql
@@ -4,7 +4,7 @@
 *              insertion of forged log entries by malicious users.
 * @kind path-problem
 * @problem.severity error
- * @security-severity 7.8
+ * @security-severity 6.1
 * @precision medium
 * @id java/log-injection
 * @tags security