Skip to content

Clarify Log4jJndiInjection.ql query name and help #7388

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sj merged 2 commits into from
Dec 14, 2021
Merged

Clarify Log4jJndiInjection.ql query name and help #7388

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d85ed9e
Clarify Log4jJndiInjection.ql query help
sj Dec 14, 2021
68a0efa
Formatting
atorralba Dec 14, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Formatting
  • Loading branch information
@atorralba
atorralba committed Dec 14, 2021
commit 68a0efaf0c47b10e87c261b07a8391290e76a33e
2 changes: 1 addition & 1 deletion java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
/**
* @name Potential Log4J LDAP JNDI injection (CVE-2021-44228)
* @description Building Log4j log entries from user-controlled data may allow
* attackers to inject malicious code through JNDI lookups when
* attackers to inject malicious code through JNDI lookups when
* using Log4J versions vulnerable to CVE-2021-44228.
* @kind path-problem
* @problem.severity error
Expand Down