Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[JAVA] Partial Path Traversal Vuln Query #9742

Open
wants to merge 14 commits into
base: main
Choose a base branch
from
Open

[JAVA] Partial Path Traversal Vuln Query #9742

wants to merge 14 commits into from

Conversation

smehta23
Copy link

@smehta23 smehta23 commented Jun 28, 2022

  • [JAVA] Partial Path Traversal Vuln Query
  • Finish Partial Path Traversal Query
  • Add additional tests from real world query run

@smowton
Copy link
Contributor

@smowton smowton commented Jun 29, 2022

Could you clarify if you're making a bounty application for this or not?

@JLLeitschuh
Copy link
Contributor

@JLLeitschuh JLLeitschuh commented Jun 29, 2022

Hi! This is submitted by my intern. I'd like him to turn this into a bounty application, if possible 🙂

smehta23 and others added 2 commits Jul 1, 2022
@smehta23 @JLLeitschuh
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalBad.java
c6f2f61 
Co-authored-by: Jonathan Leitschuh <jonathan.leitschuh@gmail.com>
@smehta23 @JLLeitschuh
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java
209a216 
Co-authored-by: Jonathan Leitschuh <jonathan.leitschuh@gmail.com>
smehta23 and others added 4 commits Jul 1, 2022
@smehta23
Add CVE number
1a41d4c
@smehta23 @JLLeitschuh
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.qhelp
48e16e5 
Co-authored-by: Jonathan Leitschuh <jonathan.leitschuh@gmail.com>
@smehta23 @JLLeitschuh
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.qhelp
ebe48ec 
Co-authored-by: Jonathan Leitschuh <jonathan.leitschuh@gmail.com>
@smehta23 @JLLeitschuh
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java
391dd5b 
Co-authored-by: Jonathan Leitschuh <jonathan.leitschuh@gmail.com>
@smehta23 smehta23 marked this pull request as ready for review Jul 1, 2022
@smehta23 smehta23 requested a review from as a code owner Jul 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@JLLeitschuh JLLeitschuh

@github/codeql-java codeql-java

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
documentation Java
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@smehta23 @smowton @JLLeitschuh