Skip to content

Commit c4e8af9

Browse files
committed
JS: Update score and add CWE-730 to LoopBoundInjection
This is a denial-of-service query, but was missing the CWE-730 tag ("denial of service") and consequently had a lower score than the other DoS queries.
1 parent 682a711 commit c4e8af9

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

javascript/ql/src/Security/CWE-834/LoopBoundInjection.ql

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,11 @@
44
* property can cause indefinite looping.
55
* @kind path-problem
66
* @problem.severity warning
7-
* @security-severity 6.5
7+
* @security-severity 7.5
88
* @id js/loop-bound-injection
99
* @tags security
1010
* external/cwe/cwe-834
11+
* external/cwe/cwe-730
1112
* @precision high
1213
*/
1314

0 commit comments

Comments
 (0)