mirror of
https://github.com/github/codeql.git
synced 2025-12-18 01:33:15 +01:00
Python: Update query metadata
This commit is contained in:
@@ -1,7 +1,9 @@
|
||||
/**
|
||||
* @name JavaScript code execution.
|
||||
* @description Passing user supplied arguments to a Javascript to Python translation engine such as Js2Py can lead to remote code execution.
|
||||
* @severity high
|
||||
* @problem.severity error
|
||||
* @security-severity 9.3
|
||||
* @precision high
|
||||
* @kind path-problem
|
||||
* @id py/js2py-rce
|
||||
* @tags security
|
||||
|
||||
Reference in New Issue
Block a user