hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
revert-4653-feature/csharp9-relational-pattern
codeql/java/change-notes/2020-10-27-insecure-bean-validation.md
Alvaro Muñoz a9ea63b976 Update java/change-notes/2020-10-27-insecure-bean-validation.md 
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
2020-10-27 21:10:46 +01:00

334 B
Raw Permalink Blame History

lgtm,codescanning

  • A new query "Insecure Bean Validation" (java/insecure-bean-validation) has been added. This query finds server-side template injections caused by untrusted data flowing from a bean property into a custom error message for a constraint validator. This vulnerability can lead to arbitrary code execution.