Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Detector for external control of configuration (CWE-15) #124

Closed
formanek opened this issue Nov 6, 2015 · 0 comments · Fixed by #125
Closed

Detector for external control of configuration (CWE-15) #124

formanek opened this issue Nov 6, 2015 · 0 comments · Fixed by #125
Labels
enhancement New feature or improvement to existing detector.
Milestone
version-1.4.4

Comments

@formanek
Copy link
Contributor

formanek commented Nov 6, 2015

I have created a detector and added a single method sink - Connection.setCatalog. Let me know if you are aware of any other potentially vulnerable methods.
@formanek formanek mentioned this issue Nov 6, 2015
Merged
@h3xstream h3xstream added the enhancement New feature or improvement to existing detector. label Nov 11, 2015
@h3xstream h3xstream added this to the version-1.4.4 milestone Nov 11, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or improvement to existing detector.
Projects
None yet
Milestone
version-1.4.4
Development

Successfully merging a pull request may close this issue.

CRLF in loggers and taint analysis improvements formanek/find-sec-bugs
2 participants
@h3xstream @formanek