Skip to content

Commit 3aaee9d

Browse files
committed
Change @security-severity for rust/log-injection from 2.6 to 6.1
1 parent 5280913 commit 3aaee9d

File tree

2 files changed

+2
-1
lines changed

2 files changed

+2
-1
lines changed
Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
---
22
category: queryMetadata
33
---
4+
* The `@security-severity` metadata of `rust/log-injection` has been increased from 2.6 (low) to 6.1 (medium).
45
* The `@security-severity` metadata of `rust/xss` has been increased from 6.1 (medium) to 7.8 (high).

rust/ql/src/queries/security/CWE-117/LogInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* insertion of forged log entries by a malicious user.
55
* @kind path-problem
66
* @problem.severity error
7-
* @security-severity 2.6
7+
* @security-severity 6.1
88
* @precision medium
99
* @id rust/log-injection
1010
* @tags security

0 commit comments

Comments
 (0)