Repository navigation
[Python]: CWE-117 Log Injection #388
Description
Query
Link to pull request with your CodeQL query:
Relevant PR: github/codeql#6182
CVE ID(s)
List the CVE ID(s) associated with this vulnerability. GitHub will automatically link CVE IDs to the GitHub Advisory Database.
- CVE-20nn-nnnnn
Report
If unsanitized user input is written to a log entry, a malicious user may be able to forge new log entries.
- Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). We would love to have you spread the word about the good work you are doing
Result(s)
Provide at least one useful result found by your query, on some revision of a real project.
Activity
[-][Java]: CWE-117 Log Injection [/-][+][Python]: CWE-117 Log Injection [/+]ghsecuritylab commentedon Jul 13, 2021
Your submission is now in status Generate Query Results.
For information, the evaluation workflow is the following:
SecLab review > Generate Query Results > FP Check > CodeQL review > SecLab finalize > Pay > Closed
ghsecuritylab commentedon Aug 9, 2021
Your submission is now in status FP Check.
For information, the evaluation workflow is the following:
SecLab review > Generate Query Results > FP Check > CodeQL review > SecLab finalize > Pay > Closed
haby0 commentedon Sep 8, 2021
Friendly ping.
ghsecuritylab commentedon Sep 13, 2021
Your submission is now in status CodeQL review.
For information, the evaluation workflow is the following:
SecLab review > Generate Query Results > FP Check > CodeQL review > SecLab finalize > Pay > Closed
ghsecuritylab commentedon Oct 12, 2021
Your submission is now in status SecLab finalize.
For information, the evaluation workflow is the following:
SecLab review > Generate Query Results > FP Check > CodeQL review > SecLab finalize > Pay > Closed
ghsecuritylab commentedon Oct 12, 2021
Your submission is now in status Pay.
For information, the evaluation workflow is the following:
SecLab review > Generate Query Results > FP Check > CodeQL review > SecLab finalize > Pay > Closed
xcorail commentedon Oct 12, 2021
Created Hackerone report 1368721 for bounty 341569 : [388] [Python]: CWE-117 Log Injection
ghsecuritylab commentedon Oct 12, 2021
Your submission is now in status Closed.
For information, the evaluation workflow is the following:
SecLab review > Generate Query Results > FP Check > CodeQL review > SecLab finalize > Pay > Closed