Skip to content

Commit 80b9ccf

Browse files
authored
Merge pull request #7388 from github/sj-patch-log4j-query-description
Clarify Log4jJndiInjection.ql query name and help
2 parents b524a61 + 68a0efa commit 80b9ccf

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,8 @@
11
/**
2-
* @name Log4j log injection and LDAP JNDI injection
2+
* @name Potential Log4J LDAP JNDI injection (CVE-2021-44228)
33
* @description Building Log4j log entries from user-controlled data may allow
4-
* attackers to inject malicious code through JNDI lookups.
4+
* attackers to inject malicious code through JNDI lookups when
5+
* using Log4J versions vulnerable to CVE-2021-44228.
56
* @kind path-problem
67
* @problem.severity error
78
* @precision high

0 commit comments

Comments
 (0)