...
| Code Block | ||
|---|---|---|
| ||
public static void main(String[] args) {
try {
File f = new File("/tmp/" + args[1]);
String canonicalPath = f.getCanonicalPath();
}
catch(IOException ie) {}
}
|
Risk Assessment
TODOUsing path names from untrusted sources without first canonicalizing the filenames involved may seriously compromise the security of a Java application.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
FIO01-J | ?? high ?? | probable | ?? high | P?? | L?? |
Automated Detection
...
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
References
| Wiki Markup |
|---|
\[[Harold 99|AA. Java References#Harold 99]\] |