-
Notifications
You must be signed in to change notification settings - Fork 1
Check input URIs to avoid potential security vulnerability #14
Copy link
Copy link
Open
Labels
Description
jordanpadams
opened on Oct 17, 2019
Issue body actions
| preparation/transform/src/main/java/gov/nasa/pds/transform/constants/Constants.java | 90 | Local-user-controlled data in path expression (CWE-022) | Local-user-controlled data in path expression (CWE-022). Accessing paths influenced by users can allow an attacker to access unexpected resources. | Y | Will investigate a fix. | 3 | CWE-022 | Test extended variable to ensure no special characters before being opened potential redirect vulnerability. |
|---|
Reactions are currently unavailable
Activity
Metadata
Metadata
Assignees
Labels
Type
Projects
- StatusShow more project fieldsToDo