We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 1f37e70 commit 18e8a27Copy full SHA for 18e8a27
java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironment.ql
@@ -1,6 +1,8 @@
1
/**
2
- * @name ExecTaintedEnvironment.ql
3
- * @description Using tainted data in a call to exec() may allow an attacker to execute arbitrary commands.
+ * @name Building a command with an injected environment variable
+ * @description Using externally controlled strings in the environment variables
4
+ * passed to a command line is vulnerable to malicious changes to the
5
+ * environment of a subprocess.
6
* @problem.severity error
7
* @kind path-problem
8
* @security-severity 9.8
0 commit comments