diff --git a/ql/src/Security/CWE-077/EnvPathInjectionCritical.md b/ql/src/Security/CWE-077/EnvPathInjectionCritical.md index 436cf685996..36622d127d8 100644 --- a/ql/src/Security/CWE-077/EnvPathInjectionCritical.md +++ b/ql/src/Security/CWE-077/EnvPathInjectionCritical.md @@ -20,7 +20,7 @@ Do not allow untrusted data to influence the system PATH: Avoid using untrusted ### Incorrect Usage -Consider the following basic setup where an environment variable `MYVAR` is set and used in different steps: +Consider the following basic setup where an environment variable `PATH` is set: ```yaml steps: diff --git a/ql/src/Security/CWE-077/EnvPathInjectionMedium.md b/ql/src/Security/CWE-077/EnvPathInjectionMedium.md index 436cf685996..36622d127d8 100644 --- a/ql/src/Security/CWE-077/EnvPathInjectionMedium.md +++ b/ql/src/Security/CWE-077/EnvPathInjectionMedium.md @@ -20,7 +20,7 @@ Do not allow untrusted data to influence the system PATH: Avoid using untrusted ### Incorrect Usage -Consider the following basic setup where an environment variable `MYVAR` is set and used in different steps: +Consider the following basic setup where an environment variable `PATH` is set: ```yaml steps: