Skip to content

Commit 8a81aa1

Browse files
authored
Set CWE-134 from 9.3 to 7.3 CVSS score for memory safe languages
- Sync up to score given to javascript/ruby
1 parent e6235a5 commit 8a81aa1

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

csharp/ql/src/Security Features/CWE-134/UncontrolledFormatString.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* and cause a denial of service.
55
* @kind path-problem
66
* @problem.severity error
7-
* @security-severity 9.3
7+
* @security-severity 7.3
88
* @precision high
99
* @id cs/uncontrolled-format-string
1010
* @tags security

java/ql/src/Security/CWE/CWE-134/ExternallyControlledFormatString.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
* @description Using external input in format strings can lead to exceptions or information leaks.
44
* @kind path-problem
55
* @problem.severity error
6-
* @security-severity 9.3
6+
* @security-severity 7.3
77
* @precision high
88
* @id java/tainted-format-string
99
* @tags security

swift/ql/src/queries/Security/CWE-134/UncontrolledFormatString.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
* @description Using external input in format strings can lead to exceptions or information leaks.
44
* @kind path-problem
55
* @problem.severity error
6-
* @security-severity 9.3
6+
* @security-severity 7.3
77
* @precision high
88
* @id swift/uncontrolled-format-string
99
* @tags security

0 commit comments

Comments
 (0)