hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Adjust ZipSlip query description according to review suggestions.

Browse Source
This commit is contained in:
Tony Torralba
2023-06-19 10:27:41 +02:00
parent 3c4d938cf1
commit 8f6d2ed2f9
6 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/experimental/Security/CWE-022/ZipSlip.ql
View File

@@ -1,8 +1,8 @@
/**
* @name Arbitrary file access during archive extraction ("Zip Slip")
* @description Accessing filesystem paths built from the name of an archive entry without
* @description Extracting files from a malicious ZIP file, or similar type of archive, without
* validating that the destination file path is within the destination directory
* can allow an attacker to access unexpected resources.
* can allow an attacker to unexpectedly gain access to resources.
* @kind path-problem
* @id py/zipslip
* @problem.severity error