We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent ada1c28 commit 8a950eeCopy full SHA for 8a950ee
csharp/ql/src/Security Features/CWE-114/AssemblyPathInjection.ql
@@ -3,7 +3,7 @@
3
* @description Loading a .NET assembly based on a path constructed from user-controlled sources
4
* may allow a malicious user to load code which modifies the program in unintended
5
* ways.
6
- * @kind path-problem
+ * @kind problem
7
* @id cs/assembly-path-injection
8
* @problem.severity error
9
* @security-severity 8.2
@@ -15,7 +15,6 @@
15
import csharp
16
import semmle.code.csharp.security.dataflow.flowsources.Remote
17
import semmle.code.csharp.commons.Util
18
-import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
19
20
/**
21
* A taint-tracking configuration for untrusted user input used to load a DLL.
0 commit comments