Skip to content

Commit e4e02ec

Browse files
Add security severity + fix qhelp
1 parent 02f395f commit e4e02ec

File tree

2 files changed

+2
-1
lines changed

2 files changed

+2
-1
lines changed

python/ql/src/Security/CWE-074/TemplateInjection.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
</p>
1313
</recommendation>
1414
<example>
15-
<p>In the following case <code>template<code> is used to generate a Jinja2 template string. This can lead to remote code execution. </p>
15+
<p>In the following case, <code>template</code> is used to generate a Jinja2 template string. This can lead to remote code execution. </p>
1616
<sample src="examples/JinjaBad.py" />
1717

1818
<p>The following is an example of a string that could be used to cause remote code execution when interpreted as a template:</p>

python/ql/src/Security/CWE-074/TemplateInjection.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@
44
* @kind path-problem
55
* @problem.severity error
66
* @precision high
7+
* @security-severity 9.3
78
* @id py/template-injection
89
* @tags security
910
* external/cwe/cwe-074

0 commit comments

Comments
 (0)