Repository navigation
Commit d122534
File tree
- javascript/ql/src
- Security
- CWE-020
- CWE-079
- change-notes
- java/ql/src
- Security/CWE
- CWE-020
- CWE-614
- change-notes
- python/ql/src
- Security/CWE-020
- change-notes
- ruby/ql/src
- change-notes
- queries/security/cwe-020
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -4,7 +4,7 @@ | |||
| 4 | 4 | * This may allow an attacker to bypass a filter or sanitizer. | |
| 5 | 5 | * @kind problem | |
| 6 | 6 | * @problem.severity warning | |
| 7 | - * @security-severity 5.0 | ||
| 7 | + * @security-severity 4.0 | ||
| 8 | 8 | * @precision high | |
| 9 | 9 | * @id java/overly-large-range | |
| 10 | 10 | * @tags correctness | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -4,7 +4,7 @@ | |||
| 4 | 4 | * interception. | |
| 5 | 5 | * @kind problem | |
| 6 | 6 | * @problem.severity error | |
| 7 | - * @security-severity 5.0 | ||
| 7 | + * @security-severity 4.0 | ||
| 8 | 8 | * @precision high | |
| 9 | 9 | * @id java/insecure-cookie | |
| 10 | 10 | * @tags security | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,5 @@ | |||
| 1 | + --- | ||
| 2 | + category: queryMetadata | ||
| 3 | + --- | ||
| 4 | + * Reduced the `security-severity` score of the `java/overly-large-range` query from 5.0 to 4.0 to better reflect its impact. | ||
| 5 | + * Reduced the `security-severity` score of the `java/insecure-cookie` query from 5.0 to 4.0 to better reflect its impact. | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -4,7 +4,7 @@ | |||
| 4 | 4 | * This may allow an attacker to bypass a filter or sanitizer. | |
| 5 | 5 | * @kind problem | |
| 6 | 6 | * @problem.severity warning | |
| 7 | - * @security-severity 5.0 | ||
| 7 | + * @security-severity 4.0 | ||
| 8 | 8 | * @precision high | |
| 9 | 9 | * @id js/overly-large-range | |
| 10 | 10 | * @tags correctness | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -4,7 +4,7 @@ | |||
| 4 | 4 | * can lead to a cross-site scripting vulnerability. | |
| 5 | 5 | * @kind path-problem | |
| 6 | 6 | * @problem.severity warning | |
| 7 | - * @security-severity 6.1 | ||
| 7 | + * @security-severity 7.8 | ||
| 8 | 8 | * @precision high | |
| 9 | 9 | * @id js/xss-through-dom | |
| 10 | 10 | * @tags security | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,5 @@ | |||
| 1 | + --- | ||
| 2 | + category: queryMetadata | ||
| 3 | + --- | ||
| 4 | + * Increased the `security-severity` score of the `js/xss-through-dom` query from 6.1 to 7.8 to align with other XSS queries. | ||
| 5 | + * Reduced the `security-severity` score of the `js/overly-large-range` query from 5.0 to 4.0 to better reflect its impact. | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -4,7 +4,7 @@ | |||
| 4 | 4 | * This may allow an attacker to bypass a filter or sanitizer. | |
| 5 | 5 | * @kind problem | |
| 6 | 6 | * @problem.severity warning | |
| 7 | - * @security-severity 5.0 | ||
| 7 | + * @security-severity 4.0 | ||
| 8 | 8 | * @precision high | |
| 9 | 9 | * @id py/overly-large-range | |
| 10 | 10 | * @tags correctness | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,4 @@ | |||
| 1 | + --- | ||
| 2 | + category: queryMetadata | ||
| 3 | + --- | ||
| 4 | + * Reduced the `security-severity` score of the `py/overly-large-range` query from 5.0 to 4.0 to better reflect its impact. | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,4 @@ | |||
| 1 | + --- | ||
| 2 | + category: queryMetadata | ||
| 3 | + --- | ||
| 4 | + * Reduced the `security-severity` score of the `rb/overly-large-range` query from 5.0 to 4.0 to better reflect its impact. | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -4,7 +4,7 @@ | |||
| 4 | 4 | * This may allow an attacker to bypass a filter or sanitizer. | |
| 5 | 5 | * @kind problem | |
| 6 | 6 | * @problem.severity warning | |
| 7 | - * @security-severity 5.0 | ||
| 7 | + * @security-severity 4.0 | ||
| 8 | 8 | * @precision high | |
| 9 | 9 | * @id rb/overly-large-range | |
| 10 | 10 | * @tags correctness | |
0 commit comments