mirror of
https://github.com/github/codeql.git
synced 2025-12-20 18:56:32 +01:00
@@ -1,11 +1,11 @@
|
||||
/**
|
||||
* @name Command execution on a remote remote server
|
||||
* @name Command execution on a secondary remote server
|
||||
* @description user provided command can lead to execute code on a external server that can be belong to other users or admins
|
||||
* @kind path-problem
|
||||
* @problem.severity error
|
||||
* @security-severity 9.3
|
||||
* @precision high
|
||||
* @id py/remote-command-injection
|
||||
* @id py/paramiko-command-injection
|
||||
* @tags security
|
||||
* experimental
|
||||
* external/cwe/cwe-074
|
||||
|
||||
Reference in New Issue
Block a user