Skip to content

Files

Latest commit

 

History

History
19 lines (12 loc) · 460 Bytes

CheckExecute.md

File metadata and controls

19 lines (12 loc) · 460 Bytes

Pattern: Possible command injection

Issue: -

Description

Checks for string interpolation and parameters in calls to Kernel#system, Kernel#exec, Kernel#syscall, and inside backticks.

Examples of command injection vulnerabilities:

system("rf -rf #{params[:file]}")
exec(params[:command])
unlink #{params[:something}

Further Reading