Skip to content

Commit 605bd19

Browse files
authored
Python: Add CWE-328 to py/weak-sensitive-data-hashing
Reading over the description at https://cwe.mitre.org/data/definitions/328.html: > The product uses a hashing algorithm that produces a hash value that can be used to determine the original input, or to find an input that can produce the same hash, more efficiently than brute force techniques. For the data that does not require computationally expensive hashing, that will be the exactly problems that this query finds 👍 (that is, MD5, SHA1)
1 parent abdf993 commit 605bd19

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

python/ql/src/Security/CWE-327/WeakSensitiveDataHashing.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
* @id py/weak-sensitive-data-hashing
99
* @tags security
1010
* external/cwe/cwe-327
11+
* external/cwe/cwe-328
1112
* external/cwe/cwe-916
1213
*/
1314

0 commit comments

Comments
 (0)