Skip to content

Commit 1484a16

Browse files
authored
Reduce severity of java/relative-path-command
Significantly reduces the severity of `java/relative-path-command` from 9.8 to 5.4 https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1 parent 3b43f84 commit 1484a16

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/Security/CWE/CWE-078/ExecRelative.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* malicious changes in the PATH environment variable.
55
* @kind problem
66
* @problem.severity warning
7-
* @security-severity 9.8
7+
* @security-severity 5.4
88
* @precision medium
99
* @id java/relative-path-command
1010
* @tags security

0 commit comments

Comments
 (0)