Skip to content

Commit b566688

Browse files
committed
rewrite @description of second-order-command-injection
1 parent 6f3ca40 commit b566688

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

javascript/ql/src/Security/CWE-078/SecondOrderCommandInjection.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
/**
22
* @name Second order command injection
3-
* @description Some shell programs allow arbitrary command execution via their command line arguments.
4-
* This is a second order command injection vulnerability.
3+
* @description Using user controlled data as arguments to some commands, such as git clone,
4+
* can allow arbitrary commands to be executed.
55
* @kind path-problem
66
* @problem.severity error
77
* @security-severity 7.0

0 commit comments

Comments
 (0)