Skip to content

Commit 18e8a27

Browse files
committed
Reworded name and description
1 parent 1f37e70 commit 18e8a27

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironment.ql

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
/**
2-
* @name ExecTaintedEnvironment.ql
3-
* @description Using tainted data in a call to exec() may allow an attacker to execute arbitrary commands.
2+
* @name Building a command with an injected environment variable
3+
* @description Using externally controlled strings in the environment variables
4+
* passed to a command line is vulnerable to malicious changes to the
5+
* environment of a subprocess.
46
* @problem.severity error
57
* @kind path-problem
68
* @security-severity 9.8

0 commit comments

Comments
 (0)