hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 03:06:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5987 from aschackmull/java/query-metadata

Browse Source 
Java: Add missing metadata.
This commit is contained in:
Chris Smowton
2021-06-02 12:40:34 +01:00
committed by GitHub
parent 8a20395857 5e96e28792
commit 7382b349c2
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/experimental/Security/CWE/CWE-094/JythonInjection.ql
View File

@@ -3,6 +3,8 @@
* @description Evaluation of a user-controlled malicious expression in Java Python * @description Evaluation of a user-controlled malicious expression in Java Python
* interpreter may lead to remote code execution. * interpreter may lead to remote code execution.
* @kind path-problem * @kind path-problem
* @problem.severity error
* @precision high
* @id java/jython-injection * @id java/jython-injection
* @tags security * @tags security
* external/cwe/cwe-094 * external/cwe/cwe-094