diff --git a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql index a6588bf195c..1caacbe8f2b 100644 --- a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql +++ b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql @@ -1,6 +1,6 @@ /** * @name Partial Path Traversal Vulnerability - * @description A misuse of the String `startsWith` method as a guard to protect against path traversal is insufficient. + * @description A prefix used to check that a canonicalised path falls within another must be slash-terminated. * @kind problem * @problem.severity error * @security-severity 9.3