Java: Add CWE 564 (SQL Injection: Hibernate)

2025-12-16 16:53:25 +01:00 · 2020-09-18 10:20:21 +01:00
parent c67605f15c
commit 32f43a84be
3 changed files with 3 additions and 0 deletions
--- a/java/ql/src/Security/CWE/CWE-089/SqlTainted.ql
+++ b/java/ql/src/Security/CWE/CWE-089/SqlTainted.ql
@@ -8,6 +8,7 @@
 * @id java/sql-injection
 * @tags security
 *       external/cwe/cwe-089
+ *       external/cwe/cwe-564
 */

 import java
--- a/java/ql/src/Security/CWE/CWE-089/SqlTaintedLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-089/SqlTaintedLocal.ql
@@ -8,6 +8,7 @@
 * @id java/sql-injection-local
 * @tags security
 *       external/cwe/cwe-089
+ *       external/cwe/cwe-564
 */

 import semmle.code.java.Expr
--- a/java/ql/src/Security/CWE/CWE-089/SqlUnescaped.ql
+++ b/java/ql/src/Security/CWE/CWE-089/SqlUnescaped.ql
@@ -8,6 +8,7 @@
 * @id java/concatenated-sql-query
 * @tags security
 *       external/cwe/cwe-089
+ *       external/cwe/cwe-564
 */

 import java