diff --git a/csharp/ql/src/Security Features/CWE-022/ZipSlip.ql b/csharp/ql/src/Security Features/CWE-022/ZipSlip.ql index 25a1e9bcd19..2e4d59aaf7e 100644 --- a/csharp/ql/src/Security Features/CWE-022/ZipSlip.ql +++ b/csharp/ql/src/Security Features/CWE-022/ZipSlip.ql @@ -1,8 +1,8 @@ /** * @name Arbitrary file access during archive extraction ("Zip Slip") - * @description Accessing filesystem paths built from the name of an archive entry without + * @description Extracting files from a malicious ZIP file, or similar type of archive, without * validating that the destination file path is within the destination directory - * can allow an attacker to access unexpected resources. + * can allow an attacker to unexpectedly gain access to resources. * @kind path-problem * @id cs/zipslip * @problem.severity error diff --git a/go/ql/src/Security/CWE-022/ZipSlip.ql b/go/ql/src/Security/CWE-022/ZipSlip.ql index 27c18248ad5..5cfb3998f4d 100644 --- a/go/ql/src/Security/CWE-022/ZipSlip.ql +++ b/go/ql/src/Security/CWE-022/ZipSlip.ql @@ -1,8 +1,8 @@ /** * @name Arbitrary file access during archive extraction ("Zip Slip") - * @description Accessing filesystem paths built from the name of an archive entry without + * @description Extracting files from a malicious ZIP file, or similar type of archive, without * validating that the destination file path is within the destination directory - * can allow an attacker to access unexpected resources. + * can allow an attacker to unexpectedly gain access to resources. * @kind path-problem * @id go/zipslip * @problem.severity error diff --git a/java/ql/src/Security/CWE/CWE-022/ZipSlip.ql b/java/ql/src/Security/CWE/CWE-022/ZipSlip.ql index 2c48ecb2aa1..0d165a73521 100644 --- a/java/ql/src/Security/CWE/CWE-022/ZipSlip.ql +++ b/java/ql/src/Security/CWE/CWE-022/ZipSlip.ql @@ -1,8 +1,8 @@ /** * @name Arbitrary file access during archive extraction ("Zip Slip") - * @description Accessing filesystem paths built from the name of an archive entry without + * @description Extracting files from a malicious ZIP file, or similar type of archive, without * validating that the destination file path is within the destination directory - * can allow an attacker to access unexpected resources. + * can allow an attacker to unexpectedly gain access to resources. * @kind path-problem * @id java/zipslip * @problem.severity error diff --git a/javascript/ql/src/Security/CWE-022/ZipSlip.ql b/javascript/ql/src/Security/CWE-022/ZipSlip.ql index f9c468c388a..aef13830eb1 100644 --- a/javascript/ql/src/Security/CWE-022/ZipSlip.ql +++ b/javascript/ql/src/Security/CWE-022/ZipSlip.ql @@ -1,8 +1,8 @@ /** * @name Arbitrary file access during archive extraction ("Zip Slip") - * @description Accessing filesystem paths built from the name of an archive entry without + * @description Extracting files from a malicious ZIP file, or similar type of archive, without * validating that the destination file path is within the destination directory - * can allow an attacker to access unexpected resources. + * can allow an attacker to unexpectedly gain access to resources. * @kind path-problem * @id js/zipslip * @problem.severity error diff --git a/python/ql/src/experimental/Security/CWE-022/ZipSlip.ql b/python/ql/src/experimental/Security/CWE-022/ZipSlip.ql index b00214cfe68..eba8da087b3 100644 --- a/python/ql/src/experimental/Security/CWE-022/ZipSlip.ql +++ b/python/ql/src/experimental/Security/CWE-022/ZipSlip.ql @@ -1,8 +1,8 @@ /** * @name Arbitrary file access during archive extraction ("Zip Slip") - * @description Accessing filesystem paths built from the name of an archive entry without + * @description Extracting files from a malicious ZIP file, or similar type of archive, without * validating that the destination file path is within the destination directory - * can allow an attacker to access unexpected resources. + * can allow an attacker to unexpectedly gain access to resources. * @kind path-problem * @id py/zipslip * @problem.severity error diff --git a/ruby/ql/src/experimental/cwe-022-zipslip/ZipSlip.ql b/ruby/ql/src/experimental/cwe-022-zipslip/ZipSlip.ql index 709e89f98e8..329f4b89977 100644 --- a/ruby/ql/src/experimental/cwe-022-zipslip/ZipSlip.ql +++ b/ruby/ql/src/experimental/cwe-022-zipslip/ZipSlip.ql @@ -1,8 +1,8 @@ /** * @name Arbitrary file access during archive extraction ("Zip Slip") - * @description Accessing filesystem paths built from the name of an archive entry without + * @description Extracting files from a malicious ZIP file, or similar type of archive, without * validating that the destination file path is within the destination directory - * can allow an attacker to access unexpected resources. + * can allow an attacker to unexpectedly gain access to resources. * @kind path-problem * @id rb/zip-slip * @problem.severity error