Reworded name and description

This commit is contained in:
Edward Minnix III
2023-12-04 23:10:26 -05:00
committed by Ed Minnix
parent 1f37e70d83
commit 18e8a27fca

View File

@@ -1,6 +1,8 @@
/**
* @name ExecTaintedEnvironment.ql
* @description Using tainted data in a call to exec() may allow an attacker to execute arbitrary commands.
* @name Building a command with an injected environment variable
* @description Using externally controlled strings in the environment variables
* passed to a command line is vulnerable to malicious changes to the
* environment of a subprocess.
* @problem.severity error
* @kind path-problem
* @security-severity 9.8