Skip to content

Commit 857b51b

Browse files
authored
Update ExecUnescaped.ql - causing FPs with hard coded strings
This query is generating False positives with hard coded strings declared within the function - issue reported by customer. We had a discussion on code_scanning channel on 6/5/25 and the team agreed upon reducing its precision to Medium.
1 parent d659d40 commit 857b51b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/Security/CWE/CWE-078/ExecUnescaped.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
* @kind problem
66
* @problem.severity error
77
* @security-severity 9.8
8-
* @precision high
8+
* @precision medium
99
* @id java/concatenated-command-line
1010
* @tags security
1111
* external/cwe/cwe-078

0 commit comments

Comments
 (0)