mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-18 20:15:14 +02:00
41128177d2
* feat: Introduce function-scoped variable interning for state analysis with new tests and fixtures * feat: Add Phase 26 symbolic execution enhancements with bitwise operator support, abstract interpretation refinements, and new taint analysis tests * feat: Refine state analysis to handle factory-pattern resource returns with mixed-path tests and leak detection enhancements * feat: Add Phase 27 debug views with symbolic execution, abstract interpretation, SSA, and call graph viewers; integrate with debug layout and styles * feat: Add Phase 31 type-qualified symbolic resolution with receiver-based callee disambiguation and testing * feat: Extend symbolic execution with state iteration, enhanced debug views, and debounced input handling * feat: Add Phase 13 resource and auth pattern extensions with new tests and fixtures * feat: Introduce CFG debug graph renderer with compact mode, toolbar, and DAG layout integration * feat: Add Phase 28 encoding and decoding transform modeling with structural symex enhancements and new taint analysis tests * feat: Extend abstract interpretation with type facts and constant value tracking in debug views and server logic * feat: Add linear path handling and witness extraction to symbolic execution with Phase 28 transform mismatch detection * feat: Refine Go auth and sanitizer handling with enhanced rules, state updates, and benchmark improvements * feat: Enable auth-state analysis by default and update relevant tests in benchmark config * test: Update state_tests to reflect default enablement of auth-state analysis and add auth suppression test * docs: update CHANGELOG.md * feat: Introduce per-index taint tracking in `HeapState` with `HeapSlot`, overflow handling, and revised SSA transfers * feat: Introduce C/C++ language labels and refine heap state tracking in SSA transfers * feat: Implement per-index array slot tracking in symbolic heap with overflow collapse * feat: Add implicit definition handling for uninitialized declarations in SSA value allocation * feat: Refactor function parameters and constants for improved clarity and maintainability * refactor: Reorder module imports and improve formatting for consistency * refactor: Fix formatting erorrs * refactor: Fix clippy warnings * refactor: Fix fmt warnings (again) * chore: Update dependencies and improve feature configuration * Add comprehensive tests for undertested modules (#36) (COPILOT) * Add comprehensive tests for undertested modules Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> Agent-Logs-Url: https://github.com/elicpeter/nyx/sessions/f3fc877e-f386-49ba-9793-fc93d3805083 * Add comprehensive tests for ext, project, walk, and errors modules Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> Agent-Logs-Url: https://github.com/elicpeter/nyx/sessions/f3fc877e-f386-49ba-9793-fc93d3805083 --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> * chore: Update dependencies and improve feature configuration * fix: formatting errors in new tests * chore: Update license list in about.toml * chore: made functions input inline * chore: updated cfg graph to take up the full page * chore: add Prettier configuration and update code formatting * Add frontend test suite with Vitest (111 tests) (#37) * Add Vitest test suite for frontend - 111 tests across utils, components, hooks, and graph utilities Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> Agent-Logs-Url: https://github.com/elicpeter/nyx/sessions/7cf0dba2-ecff-4740-ba4d-92717e74a0b7 * ci: add frontend test step to CI workflow Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> Agent-Logs-Url: https://github.com/elicpeter/nyx/sessions/5bc0ac9f-0a32-4d03-9cb7-7a15aea53fca --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> * chore: simplify array initialization in test files for consistency * ran typecheck * feat: add AnalysisWorkspace component and integrate it into CfgViewerPage * feat: update routing in AppLayout and improve empty state message in ExplorerPage * feat: enhance scan progress tracking with additional metrics and stages * feat: update license information and add license check script * feat: implement cross-file symbolic execution with callee body persistence * feat: replace dagre graphs with Graphology + ELK + Sigma for more advanced call stack and cfg rendering * feat: ensure CFG function view is scoped to the selected function, preventing bleed into sibling functions * feat: enhance resource tracking with proxy method summaries and improve finding extraction * feat: add terminal function exit detection for accurate resource leak analysis * feat: add warnings for loops and functions without bodies to improve error recovery * feat: update lambda expression handling to ensure proper function classification and control flow * feat: remove bounded formatting/string ops and add JSON.parse sanitizer for improved data handling * feat: add inline return taint analysis and regression tests for improved security checks * feat: add engine version management and migration handling for database schema updates * feat: enhance first_call_ident to skip nested function bodies and add regression tests * feat: enhance callee name resolution with two-segment normalization and disambiguation * feat: add cross-file context flags and debug assertions for taint analysis * feat: refactor taint analysis structure to unify context handling and improve clarity * feat: enhance dead code elimination to preserve Sink, Source, and Sanitizer labels with new tests * docs: updated CHANGELOG.md * fmt: formatting fixes * fix: fixed frontend formatting and lint warnings * fix: optimized ci * fix: optimized ci * Add comprehensive multi-file test coverage to Nyx (#38) * Initial checklist for multi-file test suite expansion Agent-Logs-Url: https://github.com/elicpeter/nyx/sessions/e550cb88-9767-4442-94d4-101bf5bb0e23 Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> * Add 12 new multi-file test fixtures with TP/TN/near-miss coverage Agent-Logs-Url: https://github.com/elicpeter/nyx/sessions/e550cb88-9767-4442-94d4-101bf5bb0e23 Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> * deleted root repo * rebuilt to test for regressions --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> Co-authored-by: elipeter <elicpeter@gmail.com> * feat: enhance import alias resolution and taint tracking * feat: implement security hardening with CSRF protection and path validation * feat: add support for import alias bindings in Python, PHP, and Rust * feat: enhance CFG analysis modes and improve code readability * feat: add detection for parameterized SQL queries to enhance security * feat: add safe internal redirect handling and enhance session destroy validation * feat: implement security improvements by addressing vulnerabilities in execAsync, session management, and file downloads * feat: enhance taint detection by adding support for inline source member expressions in call arguments * feat: implement pre-emission of Source nodes for inline source member expressions in call arguments * feat: add support for Throw statement in control flow and error handling * feat: add debug and echo endpoints with potential information leakage * feat: implement internal redirect suppression and enhance taint detection * feat: implement module alias tracking for dynamic dispatch in JS/TS * feat: add authorization analysis module with Express support * feat: add authorization analysis module with Express support * feat: add tests for admin guard requirements and clean checks in authorization analysis * feat: integrate Koa and Fastify frameworks into authorization analysis * feat: add Flask and Django support to authorization analysis module * feat: add support for Rails and Sinatra frameworks in authorization analysis * feat: add support for Axum, ActixWeb, and Rocket frameworks in authorization analysis * feat: add support for ActixWeb, Axum, and Rocket frameworks in authorization analysis * feat: add support for Rails and Sinatra in authorization analysis * chore: add .DS_Store to .gitignore * refactor: simplify conditional checks and improve readability in multiple files * refactor: update usage of Option methods for improved clarity and consistency * refactor: improve code readability by simplifying conditional checks and formatting * refactor: improve code formatting and readability by simplifying conditional checks * refactor: simplify conditional checks and improve readability in multiple files * refactor: simplify conditional checks in axum.rs for improved readability * feat: add CodeQL analysis configuration for enhanced security scanning * test: add comprehensive tests for `src/output.rs` SARIF builder (#39) * chore: start test coverage improvement work Agent-Logs-Url: https://github.com/elicpeter/nyx/sessions/cd7ff398-134e-4728-a5e7-0353a0744423 Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> * test: add comprehensive tests for src/output.rs SARIF builder Agent-Logs-Url: https://github.com/elicpeter/nyx/sessions/cd7ff398-134e-4728-a5e7-0353a0744423 Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> * refactor: improve code formatting and readability in output.rs --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: elicpeter <54954007+elicpeter@users.noreply.github.com> Co-authored-by: elipeter <elicpeter@gmail.com> * refactor: improve code formatting and readability in output.rs * Potential fix for code scanning alert no. 210: Uncontrolled data used in path expression Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * Potential fix for code scanning alert no. 211: Uncontrolled data used in path expression Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * refactor: enhance triage file path handling with improved error management and validation * refactor: updated func summaries for richer detail * refactor: update SSA summary extraction to use canonical FuncKey for distinct entries * refactor: enhance callee metadata structure to support arity, receiver, and qualifier for better overload resolution * refactor: add support for keyword arguments in function calls and enhance receiver extraction for method-style calls * refactor: implement new Flask routes for safe and unsafe shell command execution * refactor: separate receiver handling in SSA operations and enhance taint propagation * refactor: improve arity handling by using arg_uses for positional argument count and enhance witness scoring for tainted arguments * refactor: implement auth decorator extraction and classification for multiple languages * refactor: enhance Rust module path resolution and use map handling for cross-file disambiguation * refactor: introduce CalleeQuery struct for structured callee resolution and enhance resolver logic * refactor: implement same-file identity collision handling for `runTask` to ensure correct resolver behavior * refactor: standardize default struct initialization across multiple files * feat: add scripts for formatting checks and auto-fixes with test summaries * refactor: simplify character splitting and enhance namespace qualifier handling * refactor: improve documentation clarity and enhance code readability in resolver logic * refactor: replace default struct initialization with explicit field assignments for clarity * feat: enhance anonymous function naming by deriving context-based bindings * refactor: streamline match expressions for improved readability and performance * refactor: streamline match expressions for improved readability and performance * refactor: replace loop with while let for improved clarity and performance * feat: add SSA constant propagation support to analysis context for improved accuracy * feat: add SSA constant propagation support to analysis context for improved accuracy * feat: implement shell metacharacter validation and bounded-length checks in Rust analysis * feat: add static map analysis for command injection suppression and type safety * refactor: simplify match statements and reduce line breaks for improved readability * feat(summary): phase 1/5 SinkSite data model for primary sink-location attribution Introduce SinkSite (file_rel, line, col, snippet, cap) carrying the primary sink source-location through function summaries. Swap SsaFuncSummary.param_to_sink and FuncSummary.param_to_sink from a coarse Cap map to a deduped SmallVec<[SinkSite; 1]> per parameter, with a backward-compatible cap_sites() helper and serde defaults so pre-phase-1 on-disk rows continue to deserialise cleanly. Extraction: SinkSiteLocator bundles the tree/bytes/file_rel needed by extract_ssa_func_summary; ParsedFile::extract_ssa_artifacts wires the locator in for the persisted pass-1 path, while pass-2 intra-file transient summaries fall back to cap-only sites (behavior unchanged). Merge: GlobalSummaries::insert now unions sink sites with (file_rel, line, col, cap) dedup via shared union_param_sink_sites helper. Database: JSON-serialised summary columns carry the new shape automatically; no schema change needed. Phase 2 will consume SinkSite in build_taint_diag() to overwrite the caller-site Finding.line with the callee's sink line when resolved via summary. Phase 1 keeps behavior unchanged: scanning tests/benchmark/corpus/rust/cmdi/cmdi_indirect.rs still produces the same (wrong) line 10 finding. Adds round-trip tests covering SinkSite solo, SsaFuncSummary with sink sites, legacy-JSON default handling for both summary types, and merge dedup. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * feat(taint): phase 2/5 thread SinkSite into SsaTaintEvent and Finding Plumb Phase 1's SinkSite through the event pipeline into Findings, no output change yet. SsaTaintEvent gains `primary_sink_site: Option<SinkSite>`; when the main or callback sink-emission path has non-empty `param_to_sink_sites`, filter to sites whose `(line != 0) && (cap ∩ sink_caps != ∅)` and emit one event per distinct site — the multi-primary collapse keeps each downstream Finding single-primary. Resolution: ResolvedSummary and SinkInfo gain mirror `param_to_sink_sites` fields, populated from `SsaFuncSummary.param_to_sink` (SSA + callback paths) and `FuncSummary.param_to_sink` (global paths). Label, local-summary, and interop resolution paths leave the field empty — they only ever had cap-level info to begin with. Finding: new `primary_location: Option<SinkLocation>` with `file_rel/line/col`. `ssa_events_to_findings` maps `event.primary_sink_site` → `Finding.primary_location`, filtering cap-only sites (`line == 0`) to `None` so the (0,0) sentinel never leaks to formatters. Dedup key extended with the primary location so multi-site events aren't collapsed back together. Invariants (debug_assert!): * every SinkSite reaching emission has `line != 0 && cap ∩ sink_caps != ∅` — enforced by the pick_primary_sink_sites* filters; * every populated Finding.primary_location has `line != 0` AND non-empty `file_rel` — the cap-only → None translation upstream guarantees this. Deliberately independent of `uses_summary`: that flag tracks whether the *taint chain* used a summary, whereas primary attribution requires only that the *sink* itself was summary-resolved. A local source reaching a cross-file sink produces `uses_summary=false` alongside a populated primary_location — documented on Finding.primary_location, covered by `cross_file_sink_finding_carries_primary_location`. build_taint_diag, SARIF/JSON/explanation formatters, and the benchmark scorer remain untouched: finding.line still comes from `cfg_graph[finding.sink]`, so cmdi_indirect.rs still reports line 10 and the benchmark's rs-cmdi-003 row still shows FN in the LOC column. Tests: `cross_file_sink_finding_carries_primary_location` (proves plumbing via a synthetic FuncSummary carrying a SinkSite at 42:5) and `cross_file_sink_cap_only_site_leaves_primary_location_none` (regression guard against cap-only sites surfacing). All 1566 lib tests + integration tests pass. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat(output): phase 3/5 consume primary sink location in diag + SARIF When a finding's primary_location (populated in phase 2 from a callee summary's SinkSite) names the dangerous instruction inside a callee body, attribute the diagnostic line to that location instead of the caller's call site. The call site is demoted to a Call step in flow_steps, and a synthetic Sink step at the primary location is appended so analysts still see the full trace. Changes: - Add scan_root parameter to build_taint_diag so file_rel can be resolved back to an absolute path via a shared resolve_file_rel helper. Empty file_rel (single-file scans where namespace == "") resolves to the file under analysis. - Extend SinkLocation with snippet, carried from the upstream SinkSite so the formatter needs no second file read. - Relax the ssa_events_to_findings debug_assert to allow empty file_rel, which is valid when scan root equals the file itself. - SARIF: emit data-flow as codeFlows[0].threadFlows[0].locations[]; locations[0] already reflects the primary sink position via the updated diag line/col. Acceptance: scan on tests/benchmark/corpus/rust/cmdi/cmdi_indirect.rs now reports line 5 (Command::new) as the primary sink, with the call site at line 10 visible in flow_steps. Two expect.json fixtures updated (must_match line_range widened): - javascript/taint/context_sensitive_call: 12-14 -> 7-14 (line 8 is the real sink inside run()). - rust/cfg/closure_async: 10-10 -> 10-11 (line 11 is Command::new inside the closure). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat(bench): phase 4/5 validate primary sink attribution across corpus Extend the benchmark scorer and ground truth to lock in phase 3's primary-location behavior, and add fixtures that exercise the new capability end-to-end. Scorer (tests/benchmark_test.rs): - Add optional `expected_call_site_lines: Option<Vec<[usize; 2]>>` on Case. When present, score_location_level additionally requires at least one flow_step in the finding's evidence trace to fall within ±2 of the call-site range. When absent, the check is skipped — fully forward-compatible with existing fixtures. - Retain ±2 tolerance on expected_sink_lines (compared against the now-primary Diag.line post-phase-3). Ground truth edits: - rs-cmdi-cross-001: expected_sink_lines [8,8] -> [9,9]. Line 8 is the transform::wrap call site (a cross-file propagator, not a sink); line 9 is Command::new, the real sink. The ±2 tolerance happened to mask this stale attribution but it was semantically wrong — phase 4 is the right time to correct it. Also adds expected_call_site_lines [8,8] so the new field is exercised on an existing cross-file case. - rs-cmdi-003: adds expected_call_site_lines [10,10] (run_cmd call). This fixture's sink (Command::new inside run_cmd at line 5) was the motivating case for phases 1-3; adding the call-site assertion guards against regression to caller-line attribution. New fixtures: - rust/cmdi/cmdi_indirect_multisink.rs (rs-cmdi-009): helper run_both takes two tainted params and invokes two Command sinks on consecutive lines. Locks in that primary line lands inside the helper (lines 5-6), not at the caller (line 12). Notes document that SinkSite is currently one-per-callee so both findings today collapse onto the first sink; expected_sink_lines=[5,6] and expected_call_site_lines=[12,12] stay valid either way. - python/cmdi/cross_indirect_sink/{app.py,helper.py} (py-cmdi-cross- 004): sink os.system lives in helper.py (cross-file), caller in app.py reads env source and calls run_cmd. Verifies phase 3's cross-file primary attribution: Diag.path = helper.py, Diag.line = 5, with app.py:7 recorded in flow_steps as a Call step. Acceptance: - `cargo test --test benchmark_test -- --ignored --nocapture` passes. - rs-cmdi-003 is TP/TP/TP (the target flip FN->TP at LOC). All pre-existing TP/TP/TP fixtures remain TP/TP/TP; 2 new fixtures are TP/TP/TP. - Aggregate rule-level: TP=158 FP=10 FN=1 TN=97, P=0.940 R=0.994 F1=0.966 on the 266-case corpus (was TP=156 FP=10 FN=1 TN=97 on 264 pre-phase-4, delta is the +2 new cases both resolving TP). - Full `cargo test` green (1566 lib tests + all integration tests). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat(taint): phase 5/5 lock Finding.primary_location contract via regression test Add a regression test in src/taint/ssa_transfer.rs that wires up a synthetic SsaFuncSummary with a SinkSite at other.rs:42:10 and drives the three emission stages (pick_primary_sink_sites → emit_ssa_taint_events → ssa_events_to_findings) against a minimal caller SSA body. Asserts the resulting Finding.primary_location is exactly that triple. The existing integration tests in src/taint/tests.rs cover the coarse FuncSummary path end-to-end through analyse_file. This test locks in the lower-level SSA-side plumbing so a future refactor that silently drops the site between pick → emit → findings fails here rather than only at the benchmark layer. Also refreshes tests/benchmark/results/latest.json (timestamp only; rs-cmdi-003 remains TP/TP/TP and the aggregate P/R/F1 are unchanged from phase 4). Closes the primary sink-location attribution feature (phases 1-5/5): * Phase 1 — SinkSite data model on summaries. * Phase 2 — SinkSite threaded into SsaTaintEvent and Finding. * Phase 3 — diag + SARIF consume primary_location. * Phase 4 — benchmark validates primary_call_site_lines across corpus. * Phase 5 — regression test locks the event→finding contract. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * refactor: clean up formatting and improve readability in multiple files * refactor: simplify type definition for deduplication key in findings * test(harness): add must_not_match expectation for FP regression guards Extends ExpectedFinding with must_not_match field that asserts a diagnostic must NOT fire — presence is a hard failure. Non-consuming scan so it coexists with must_match entries on the same rule_id. Adds forbidden_violations accumulator and updates summary line. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat(regression): update expectations to ensure must_not_match for various taint and resource leak rules * feat: implement auto-seeding for JS/TS handler parameters to enhance taint tracking * feat: update switch statement handling to improve control flow analysis * feat: implement promisify alias handling for JS/TS to enhance taint tracking * feat: enhance taint tracking by refining expectation handling and adding mode filtering * feat: refine SQL handling in stream processing and enhance auto-seeding for handler parameters * feat: update taint tracking rules to enforce full mode matching and improve flow analysis * feat: enhance Ruby subshell handling to improve taint tracking and flow analysis * feat: update xss_response expectations to refine taint flow analysis and enhance regression guarding * feat: refine framework detection and update expectation handling for Echo and Sinatra * feat: implement max_count for taint tracking expectations and deduplicate findings * feat: add strict_unexpected handling for taint-unsanitised-flow in expectation files * feat: enhance deduplication of taint-unsanitised-flow findings by collapsing based on line and severity * feat: add strict_unexpected handling for taint-unsanitised-flow in multiple expectation files * feat: add structural invariant checks for SSA bodies * feat: ensure deterministic phi emission order using BTreeSet * feat: enhance handling of terminators to ensure authoritative flow through successor edges * feat: enhance Goto terminator handling to ensure all successors are marked executable * feat: refactor code for improved readability and organization * feat: simplify predicate checks and enhance readability in SSA handling * feat: implement per-file parse timeout and enhance file size handling * feat: migrate analysis engine toggles from environment variables to configuration file * feat: remove unnecessary whitespace in hostile_input_tests.rs * feat: remove unnecessary whitespace in hostile_input_tests.rs * feat: update dependencies and enhance documentation on language maturity * feat: enhance security headers and improve request body limits * feat: implement sink capability bits for deduplication and enhance evidence tagging * feat: implement dynamic activation handling for gated sinks and enhance validation logic * feat: enhance configuration documentation and clarify inline analysis cache behavior * feat: implement panic recovery during analysis to continue scans past errors * feat: add expectations configuration for taint analysis and performance metrics * feat: enhance error handling and logging during file reading and mutex locking * feat: add cross-file body loading tests and plumbing for CF-1 phase * feat: implement cross-file k=1 context-sensitive inline taint analysis with new tests and fixtures * feat: implement indexed-scan parity in cross-file inline analysis with new dropdown and copy functionality * feat: enhance classification span handling in CFG and AST for improved source attribution * feat: add new Express routes for handling user input and telemetry data * feat: implement ternary expression handling in CFG with diamond structure for JS/TS * feat: implement Phase CF-3 abstract-domain transfer channels in summaries * feat: add support for string-prefix transfer in cross-file calls and update tests * docs: reduce RESULTS.md doc size * feat: implement Phase CF-4 per-return-path summary decomposition with tests * feat: update parameter handling in pass1 and refactor SsaFuncSummary initialization * feat: implement Phase CF-5 for cross-file SCC joint fixed-point convergence with new flags and tests * feat: implement Phase CF-6 with parameter-granularity points-to summaries and associated tests * refactor: update comments and documentation for clarity and consistency * style: format code for consistency and readability * refactor: simplify verdict handling and improve edge checking logic * refactor: optimize path and identifier collection by avoiding unnecessary cloning * chore: update Cargo.toml for Rust version 1.85 and add ignored files; modify CHANGELOG and README for clarity on state analysis defaults * refactor: update documentation and improve clarity in configuration files * refactor: update documentation and improve clarity in configuration files * feat: add JS/TS pass-2 convergence tests and expectations configuration * feat: add Phase 5 regression tests for inline cache origin attribution and update related logic * feat: implement Phase 7 deduplication and alternative path linking for taint findings * feat: implement structural DFS index for anonymous functions and update naming conventions * feat: add Phase 8 regression tests for container-element taint in JS and Python * feat: add engine-depth profiles and explain-engine option for CLI * feat: update expectations and add new README fixtures for multi-file scan regression * feat: implement Phase 11 callback-alias and factory patterns with regression tests * feat: implement Terminator::Switch for multi-way dispatch and add regression tests * feat: add real-CVE benchmark fixtures for CVE-2023-48022, CVE-2019-14939, and CVE-2023-26159 with corresponding patched variants * refactor: extract cfg and ssa_transfer to submodules * refactor: cargo fmt * refactor: remove unnecessary blank line in cfg_tests.rs * refactor: remove unnecessary planning file * chore: update Rust version to 1.88 and bump dependencies in Cargo files * feat: enhance triage UI with new layout and controls, update README for clarity * feat: enhance triage UI with new layout and controls, update README for clarity * chore: remove outdated section from README for version 0.5.0 * docs: improve clarity and consistency in README content * chore: add "GPL-3.0-or-later" to license options in about.toml * chore: update license handling in about.toml and check-licenses.mjs * style: format code for improved readability in TriagePage component * style: format code for improved readability in TriagePage component * chore: enhance license handling and improve body_id scoping in seed lookup * feat: introduce owner and parent body IDs for enhanced seed scoping * feat: implement direction-aware engine provenance with new CLI flag for strict CI gating * feat: add Undef SSA operation for improved control-flow handling * style: improve code formatting for consistency and readability in multiple files * feat: add 16-function chain SCC across multiple files for enhanced analysis * style: simplify code formatting for improved readability in multiple files * fix: update CapHitReason default implementation and improve README clarity * docs: enhance README with detailed explanations of taint analysis and limitations * docs: refine README for clarity and consistency in taint analysis section * style: improve code formatting for better readability in NewScanModal and scans * fix: update cargo-about command to use --offline for deterministic license generation * fix: update cargo-about command to use --offline for deterministic license generation * ci: add step to prime cargo registry cache for deterministic license generation * feat: add support for non-sink collections in authorization analysis * feat: enhance authorization checks with row-level ownership equality and binding tracking * feat: implement self-scoped user handling and enhance ownership checks * refactor: simplify assertions and formatting in authorization analysis tests * fix: normalize line endings in THIRDPARTY-LICENSES.html generation and update README with AI disclosure * docs: update AI disclosure section for clarity and conciseness * feat: add AI Contribution Policy and update contributing guidelines for AI assistance disclosure * feat: enhance authorization analysis with SSA-derived variable type classification * feat: implement auth_finding_to_diag function for enhanced security diagnostics * feat: add args_value_refs to CallSite struct for enhanced argument tracking * feat: add args_value_refs to CallSite struct for enhanced argument tracking * feat: add direction-aware engine provenance with LossDirection classification and new CLI flag * feat: simplify strip_cap_from_call_args call by removing unnecessary line breaks * feat: enhance error message handling in cli_validation_tests for better Windows compatibility * feat: optimize release profile settings in Cargo.toml and update CodeQL configuration * feat: enhance release build process with SBOM generation and SLSA provenance * feat: update actions/checkout and actions/setup-node to v6, enhance CLI options, and improve auth-check summaries * feat: introduce PathFact handling for path safety checks and rejection logic * feat: introduce PathFact handling for path safety checks and rejection logic * feat: update benchmark data and enhance path sanitization logic with new safety checks * feat: document AI assistance in frontend UI development and human review process * feat: add return path facts for enhanced path safety checks and update documentation * chore: update release date for version 0.5.0 in CHANGELOG.md * chore: clean up ci.yml by removing outdated comments and clarifying steps * feat: implement cross-language path sanitizers and validators for enhanced security * feat: enhance SSA value usage tracking by including block terminators and improve path safety checks * feat: enhance switch statement handling by adding per-case path constraints and support for exclusive cases * refactor: simplify conditional formatting and improve code readability in executor and lower modules * feat: add vulnerable examples for various languages demonstrating authentication and sanitization issues * feat: enhance actor context recognition for self-actor identifiers and add support for global non-sink receivers * feat: enhance actor context recognition for self-actor identifiers and add support for global non-sink receivers * feat: add transform classifiers for Java, Go, and Ruby with corresponding tests * refactor: clarify comments on reassign-to-constant idiom and sink behavior in guards.rs --------- Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
6838 lines
No EOL
196 KiB
JSON
6838 lines
No EOL
196 KiB
JSON
{
|
|
"benchmark_version": "1.0",
|
|
"timestamp": "2026-04-25T21:03:22Z",
|
|
"scanner_version": "0.5.0",
|
|
"scanner_config": {
|
|
"analysis_mode": "Full",
|
|
"taint_enabled": true,
|
|
"ast_patterns_enabled": true,
|
|
"state_analysis_enabled": true,
|
|
"worker_threads": 1
|
|
},
|
|
"ground_truth_hash": "sha256:65a3ac50004942a55d443d90790a395054de67df7e8a75ddb91fd880b0a09a2a",
|
|
"corpus_size": 363,
|
|
"cases_run": 362,
|
|
"cases_skipped": 1,
|
|
"outcomes": [
|
|
{
|
|
"case_id": "c-buf-001",
|
|
"file": "c/buffer_overflow/buffer_sprintf.c",
|
|
"language": "c",
|
|
"vuln_class": "buffer_overflow",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:19)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"c.memory.sprintf"
|
|
],
|
|
"all_finding_ids": [
|
|
"c.memory.sprintf",
|
|
"taint-unsanitised-flow (source 6:19)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-buf-002",
|
|
"file": "c/buffer_overflow/buffer_strcpy.c",
|
|
"language": "c",
|
|
"vuln_class": "buffer_overflow",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"c.memory.strcpy"
|
|
],
|
|
"all_finding_ids": [
|
|
"c.memory.strcpy",
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-buf-003",
|
|
"file": "c/buffer_overflow/buffer_strcat.c",
|
|
"language": "c",
|
|
"vuln_class": "buffer_overflow",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"c.memory.strcat"
|
|
],
|
|
"all_finding_ids": [
|
|
"c.memory.strcat",
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-cmdi-001",
|
|
"file": "c/cmdi/cmdi_system.c",
|
|
"language": "c",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"c.cmdi.system",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"c.cmdi.system",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-cmdi-002",
|
|
"file": "c/cmdi/cmdi_popen.c",
|
|
"language": "c",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"c.cmdi.popen",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"c.cmdi.popen",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-cmdi-003",
|
|
"file": "c/cmdi/cmdi_exec.c",
|
|
"language": "c",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-cmdi-004",
|
|
"file": "c/cmdi/cmdi_fgets.c",
|
|
"language": "c",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"c.cmdi.system",
|
|
"taint-unsanitised-flow (source 7:5)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"c.cmdi.system",
|
|
"taint-unsanitised-flow (source 7:5)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-fmt-001",
|
|
"file": "c/fmt_string/fmt_printf.c",
|
|
"language": "c",
|
|
"vuln_class": "fmt_string",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"c.memory.printf_no_fmt"
|
|
],
|
|
"all_finding_ids": [
|
|
"c.memory.printf_no_fmt",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-fmt-002",
|
|
"file": "c/fmt_string/fmt_fprintf.c",
|
|
"language": "c",
|
|
"vuln_class": "fmt_string",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-path-001",
|
|
"file": "c/path_traversal/path_traversal_fopen.c",
|
|
"language": "c",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-path-002",
|
|
"file": "c/path_traversal/path_traversal_open.c",
|
|
"language": "c",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-001",
|
|
"file": "c/safe/safe_constant.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-002",
|
|
"file": "c/safe/safe_sanitized_snprintf.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-003",
|
|
"file": "c/safe/safe_atoi.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-004",
|
|
"file": "c/safe/safe_reassigned.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-005",
|
|
"file": "c/safe/safe_strncpy.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-006",
|
|
"file": "c/safe/safe_validated.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-007",
|
|
"file": "c/safe/safe_strtol.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-008",
|
|
"file": "c/safe/safe_sanitize_func.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-014",
|
|
"file": "c/safe/safe_direct_path_sanitizer.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-015",
|
|
"file": "c/safe/safe_status_code_sanitizer.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-safe-016",
|
|
"file": "c/safe/safe_cross_function_dotdot.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "c-ssrf-001",
|
|
"file": "c/ssrf/ssrf_curl.c",
|
|
"language": "c",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-buf-001",
|
|
"file": "cpp/buffer_overflow/buffer_sprintf.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "buffer_overflow",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:19)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"cpp.memory.sprintf"
|
|
],
|
|
"all_finding_ids": [
|
|
"cpp.memory.sprintf",
|
|
"taint-unsanitised-flow (source 6:19)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-buf-002",
|
|
"file": "cpp/buffer_overflow/buffer_strcpy.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "buffer_overflow",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"cpp.memory.strcpy"
|
|
],
|
|
"all_finding_ids": [
|
|
"cpp.memory.strcpy",
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-cmdi-001",
|
|
"file": "cpp/cmdi/cmdi_system.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"cpp.cmdi.system",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"cpp.cmdi.system",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-cmdi-002",
|
|
"file": "cpp/cmdi/cmdi_popen.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"cpp.cmdi.popen",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"cpp.cmdi.popen",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-cmdi-003",
|
|
"file": "cpp/cmdi/cmdi_getline.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"cpp.cmdi.system",
|
|
"taint-unsanitised-flow (source 8:5)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"cpp.cmdi.system",
|
|
"taint-unsanitised-flow (source 8:5)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-cmdi-004",
|
|
"file": "cpp/cmdi/cmdi_exec.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-fmt-001",
|
|
"file": "cpp/fmt_string/fmt_printf.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "fmt_string",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"cpp.memory.printf_no_fmt"
|
|
],
|
|
"all_finding_ids": [
|
|
"cpp.memory.printf_no_fmt",
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-fmt-002",
|
|
"file": "cpp/fmt_string/fmt_fprintf.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "fmt_string",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:17)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-path-001",
|
|
"file": "cpp/path_traversal/path_traversal_fopen.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-path-002",
|
|
"file": "cpp/path_traversal/path_traversal_open.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-001",
|
|
"file": "cpp/safe/safe_constant.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-002",
|
|
"file": "cpp/safe/safe_snprintf.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-003",
|
|
"file": "cpp/safe/safe_stoi.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-004",
|
|
"file": "cpp/safe/safe_reassigned.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-005",
|
|
"file": "cpp/safe/safe_strncpy.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-006",
|
|
"file": "cpp/safe/safe_validated.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-007",
|
|
"file": "cpp/safe/safe_sanitize_func.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-008",
|
|
"file": "cpp/safe/safe_strtol.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-014",
|
|
"file": "cpp/safe/safe_direct_path_sanitizer.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-015",
|
|
"file": "cpp/safe/safe_optional_path_sanitizer.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-safe-016",
|
|
"file": "cpp/safe/safe_cross_function_dotdot.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-ssrf-001",
|
|
"file": "cpp/ssrf/ssrf_curl.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cpp-ssrf-002",
|
|
"file": "cpp/ssrf/ssrf_connect.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 10:21)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 10:21)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-c-2016-3714-patched",
|
|
"file": "cve_corpus/c/CVE-2016-3714/patched.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-c-2016-3714-vulnerable",
|
|
"file": "cve_corpus/c/CVE-2016-3714/vulnerable.c",
|
|
"language": "c",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"c.cmdi.system"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"c.cmdi.system"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-c-2019-18634-patched",
|
|
"file": "cve_corpus/c/CVE-2019-18634/patched.c",
|
|
"language": "c",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-c-2019-18634-vulnerable",
|
|
"file": "cve_corpus/c/CVE-2019-18634/vulnerable.c",
|
|
"language": "c",
|
|
"vuln_class": "memory_safety",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"c.memory.strcpy"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"c.memory.strcpy"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-cpp-2019-13132-patched",
|
|
"file": "cve_corpus/cpp/CVE-2019-13132/patched.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-cpp-2019-13132-vulnerable",
|
|
"file": "cve_corpus/cpp/CVE-2019-13132/vulnerable.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "memory_safety",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"cpp.memory.strcpy"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"cpp.memory.strcpy"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-cpp-2022-1941-patched",
|
|
"file": "cve_corpus/cpp/CVE-2022-1941/patched.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-cpp-2022-1941-vulnerable",
|
|
"file": "cve_corpus/cpp/CVE-2022-1941/vulnerable.cpp",
|
|
"language": "cpp",
|
|
"vuln_class": "memory_safety",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"cpp.memory.strcpy"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"cpp.memory.strcpy"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-go-2022-30323-patched",
|
|
"file": "cve_corpus/go/CVE-2022-30323/patched.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-go-2022-30323-vulnerable",
|
|
"file": "cve_corpus/go/CVE-2022-30323/vulnerable.go",
|
|
"language": "go",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"go.cmdi.exec_command",
|
|
"taint-unsanitised-flow (source 30:9)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"go.cmdi.exec_command",
|
|
"taint-unsanitised-flow (source 30:9)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-java-2015-7501-patched",
|
|
"file": "cve_corpus/java/CVE-2015-7501/patched.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-java-2015-7501-vulnerable",
|
|
"file": "cve_corpus/java/CVE-2015-7501/vulnerable.java",
|
|
"language": "java",
|
|
"vuln_class": "deserialization",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"java.deser.readobject",
|
|
"taint-unsanitised-flow (source 34:54)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"java.xss.getwriter_print"
|
|
],
|
|
"all_finding_ids": [
|
|
"java.deser.readobject",
|
|
"taint-unsanitised-flow (source 34:54)",
|
|
"java.xss.getwriter_print"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-java-2017-12629-patched",
|
|
"file": "cve_corpus/java/CVE-2017-12629/patched.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-java-2017-12629-vulnerable",
|
|
"file": "cve_corpus/java/CVE-2017-12629/vulnerable.java",
|
|
"language": "java",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"java.cmdi.runtime_exec",
|
|
"taint-unsanitised-flow (source 29:21)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"java.cmdi.runtime_exec",
|
|
"taint-unsanitised-flow (source 29:21)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-js-2019-14939-patched",
|
|
"file": "cve_corpus/javascript/CVE-2019-14939/patched.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-js-2019-14939-vulnerable",
|
|
"file": "cve_corpus/javascript/CVE-2019-14939/vulnerable.js",
|
|
"language": "javascript",
|
|
"vuln_class": "code_exec",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"js.code_exec.eval",
|
|
"taint-unsanitised-flow (source 23:25)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"js.code_exec.eval",
|
|
"taint-unsanitised-flow (source 23:25)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-php-2017-9841-patched",
|
|
"file": "cve_corpus/php/CVE-2017-9841/patched.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-php-2017-9841-vulnerable",
|
|
"file": "cve_corpus/php/CVE-2017-9841/vulnerable.php",
|
|
"language": "php",
|
|
"vuln_class": "code_exec",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"php.code_exec.eval",
|
|
"taint-unsanitised-flow (source 21:9)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"php.code_exec.eval",
|
|
"taint-unsanitised-flow (source 21:9)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-php-2018-15133-patched",
|
|
"file": "cve_corpus/php/CVE-2018-15133/patched.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-php-2018-15133-vulnerable",
|
|
"file": "cve_corpus/php/CVE-2018-15133/vulnerable.php",
|
|
"language": "php",
|
|
"vuln_class": "deserialization",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"php.deser.unserialize",
|
|
"taint-unsanitised-flow (source 24:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"php.deser.unserialize",
|
|
"taint-unsanitised-flow (source 24:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-py-2017-18342-patched",
|
|
"file": "cve_corpus/python/CVE-2017-18342/patched.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-py-2017-18342-vulnerable",
|
|
"file": "cve_corpus/python/CVE-2017-18342/vulnerable.py",
|
|
"language": "python",
|
|
"vuln_class": "deserialization",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.deser.yaml_load",
|
|
"taint-unsanitised-flow (source 26:11)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.deser.yaml_load",
|
|
"taint-unsanitised-flow (source 26:11)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-py-2023-48022-patched",
|
|
"file": "cve_corpus/python/CVE-2023-48022/patched.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-py-2023-48022-vulnerable",
|
|
"file": "cve_corpus/python/CVE-2023-48022/vulnerable.py",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 26:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 26:12)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-rb-2013-0156-patched",
|
|
"file": "cve_corpus/ruby/CVE-2013-0156/patched.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-rb-2013-0156-vulnerable",
|
|
"file": "cve_corpus/ruby/CVE-2013-0156/vulnerable.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "deserialization",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rb.deser.yaml_load"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rb.deser.yaml_load"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-rs-2018-20997-patched",
|
|
"file": "cve_corpus/rust/CVE-2018-20997/patched.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "cve-rs-2018-20997-vulnerable",
|
|
"file": "cve_corpus/rust/CVE-2018-20997/vulnerable.rs",
|
|
"language": "rust",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 27:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 27:22)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "cve-rs-2022-36113-patched",
|
|
"file": "cve_corpus/rust/CVE-2022-36113/patched.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "cve-rs-2022-36113-vulnerable",
|
|
"file": "cve_corpus/rust/CVE-2022-36113/vulnerable.rs",
|
|
"language": "rust",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 29:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 29:22)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "cve-rs-2024-24576-patched",
|
|
"file": "cve_corpus/rust/CVE-2024-24576/patched.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "cve-rs-2024-24576-vulnerable",
|
|
"file": "cve_corpus/rust/CVE-2024-24576/vulnerable.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 27:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 27:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "cve-ts-2023-26159-patched",
|
|
"file": "cve_corpus/typescript/CVE-2023-26159/patched.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "cve-ts-2023-26159-vulnerable",
|
|
"file": "cve_corpus/typescript/CVE-2023-26159/vulnerable.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 27:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 27:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-cmdi-001",
|
|
"file": "go/cmdi/cmdi_direct.go",
|
|
"language": "go",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"go.cmdi.exec_command",
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:9)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"go.cmdi.exec_command",
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:9)"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-cmdi-002",
|
|
"file": "go/cmdi/cmdi_indirect.go",
|
|
"language": "go",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"go.cmdi.exec_command",
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"go.cmdi.exec_command",
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-cmdi-003",
|
|
"file": "go/cmdi_env/cmdi_env.go",
|
|
"language": "go",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"go.cmdi.exec_command",
|
|
"taint-unsanitised-flow (source 9:9)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"go.cmdi.exec_command",
|
|
"taint-unsanitised-flow (source 9:9)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-cmdi-cross-001",
|
|
"file": "go/cmdi/cross_source/",
|
|
"language": "go",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"go.cmdi.exec_command",
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:9)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"go.cmdi.exec_command",
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:9)"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-fmt_string-001",
|
|
"file": "go/fmt_string/fmt_injection.go",
|
|
"language": "go",
|
|
"vuln_class": "fmt_string",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 9:9)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 9:9)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-interproc-001",
|
|
"file": "go/interprocedural/interproc_taint_propagation.go",
|
|
"language": "go",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 13:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 13:12)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-interproc-safe-001",
|
|
"file": "go/interprocedural/interproc_sanitizer_wrap.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-path_traversal-001",
|
|
"file": "go/path_traversal/path_traversal.go",
|
|
"language": "go",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-path_traversal-cross-001",
|
|
"file": "go/path_traversal/cross_sanitizer/",
|
|
"language": "go",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"state-unauthed-access",
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-pathprune-safe-001",
|
|
"file": "go/path_pruning/safe_early_return.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-001",
|
|
"file": "go/safe/safe_constant.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-002",
|
|
"file": "go/safe/safe_dominated.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-003",
|
|
"file": "go/safe/safe_interprocedural.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-004",
|
|
"file": "go/safe/safe_non_security_sink.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-005",
|
|
"file": "go/safe/safe_reassigned.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-006",
|
|
"file": "go/safe/safe_sanitized.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-007",
|
|
"file": "go/safe/safe_type_check.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-008",
|
|
"file": "go/safe/safe_validated.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-014",
|
|
"file": "go/safe/safe_direct_path_sanitizer.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-015",
|
|
"file": "go/safe/safe_tuple_path_sanitizer.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-016",
|
|
"file": "go/safe/safe_cross_function_dotdot.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-safe-atoi-001",
|
|
"file": "go/safe/safe_strconv_atoi.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-sqli-001",
|
|
"file": "go/sqli/sqli_concat.go",
|
|
"language": "go",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"go.sqli.query_concat",
|
|
"taint-unsanitised-flow (source 9:8)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"go.auth.missing_ownership_check"
|
|
],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"go.auth.missing_ownership_check",
|
|
"go.sqli.query_concat",
|
|
"taint-unsanitised-flow (source 9:8)"
|
|
],
|
|
"security_finding_count": 4,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-sqli-002",
|
|
"file": "go/sqli/sqli_sprintf.go",
|
|
"language": "go",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 10:8)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 10:8)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-sqli-003",
|
|
"file": "go/sqli/sqli_queryrow.go",
|
|
"language": "go",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"go.sqli.query_concat",
|
|
"taint-unsanitised-flow (source 9:8)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"go.auth.missing_ownership_check"
|
|
],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"go.auth.missing_ownership_check",
|
|
"go.sqli.query_concat",
|
|
"taint-unsanitised-flow (source 9:8)"
|
|
],
|
|
"security_finding_count": 4,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-ssrf-001",
|
|
"file": "go/ssrf/ssrf_http_get.go",
|
|
"language": "go",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 8:9)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 8:9)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-ssrf-002",
|
|
"file": "go/ssrf/ssrf_new_request.go",
|
|
"language": "go",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 8:9)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 8:9)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-ssrf-safe-001",
|
|
"file": "go/ssrf/safe_ssrf_hardcoded.go",
|
|
"language": "go",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-xss-001",
|
|
"file": "go/xss/xss_fprintf.go",
|
|
"language": "go",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-xss-002",
|
|
"file": "go/xss/xss_template_html.go",
|
|
"language": "go",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 9:11)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 9:11)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "go-xss-gin-001",
|
|
"file": "go/xss/xss_gin_source.go",
|
|
"language": "go",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 9:10)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-cmdi-001",
|
|
"file": "java/cmdi/CmdiDirect.java",
|
|
"language": "java",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"java.cmdi.runtime_exec",
|
|
"taint-unsanitised-flow (source 5:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"java.cmdi.runtime_exec",
|
|
"taint-unsanitised-flow (source 5:22)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-cmdi-002",
|
|
"file": "java/cmdi/CmdiIndirect.java",
|
|
"language": "java",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"java.cmdi.runtime_exec",
|
|
"taint-unsanitised-flow (source 5:23)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"java.cmdi.runtime_exec",
|
|
"taint-unsanitised-flow (source 5:23)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-code_injection-001",
|
|
"file": "java/code_injection/CodeInjection.java",
|
|
"language": "java",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"java.reflection.class_forname",
|
|
"taint-unsanitised-flow (source 5:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"java.reflection.class_forname",
|
|
"taint-unsanitised-flow (source 5:22)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-deser-001",
|
|
"file": "java/deser/DeserOis.java",
|
|
"language": "java",
|
|
"vuln_class": "deser",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"java.deser.readobject",
|
|
"taint-unsanitised-flow (source 6:55)",
|
|
"taint-unsanitised-flow (source 6:55)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"java.xss.getwriter_print"
|
|
],
|
|
"all_finding_ids": [
|
|
"java.deser.readobject",
|
|
"taint-unsanitised-flow (source 6:55)",
|
|
"java.xss.getwriter_print",
|
|
"taint-unsanitised-flow (source 6:55)"
|
|
],
|
|
"security_finding_count": 4,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-deser-002",
|
|
"file": "java/deser/DeserSource.java",
|
|
"language": "java",
|
|
"vuln_class": "deser",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"java.deser.readobject",
|
|
"taint-unsanitised-flow (source 6:55)",
|
|
"java.cmdi.runtime_exec",
|
|
"taint-unsanitised-flow (source 6:55)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"java.deser.readobject",
|
|
"taint-unsanitised-flow (source 6:55)",
|
|
"java.cmdi.runtime_exec",
|
|
"taint-unsanitised-flow (source 6:55)"
|
|
],
|
|
"security_finding_count": 4,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-interproc-001",
|
|
"file": "java/interprocedural/InterprocTaintPropagation.java",
|
|
"language": "java",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 9:25)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"cfg-resource-leak"
|
|
],
|
|
"all_finding_ids": [
|
|
"cfg-resource-leak",
|
|
"taint-unsanitised-flow (source 9:25)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-interproc-safe-001",
|
|
"file": "java/interprocedural/InterprocSanitizerWrap.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-path_traversal-001",
|
|
"file": "java/path_traversal/PathTraversal.java",
|
|
"language": "java",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"state-resource-leak"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-preauth-001",
|
|
"file": "java/auth/SafePreAuthorize.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-preauth-vuln-001",
|
|
"file": "java/auth/VulnNoPreAuthorize.java",
|
|
"language": "java",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 11:23)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"java.xss.getwriter_print"
|
|
],
|
|
"all_finding_ids": [
|
|
"java.xss.getwriter_print",
|
|
"taint-unsanitised-flow (source 11:23)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-001",
|
|
"file": "java/safe/SafeConstant.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-002",
|
|
"file": "java/safe/SafeDominated.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-003",
|
|
"file": "java/safe/SafeInterprocedural.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-004",
|
|
"file": "java/safe/SafeNonSecuritySink.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-005",
|
|
"file": "java/safe/SafeReassigned.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-006",
|
|
"file": "java/safe/SafeSanitized.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-007",
|
|
"file": "java/safe/SafeTypeCheck.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-008",
|
|
"file": "java/safe/SafeValidated.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-014",
|
|
"file": "java/safe/SafeDirectPathSanitizer.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-015",
|
|
"file": "java/safe/SafeOptionalPathSanitizer.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-016",
|
|
"file": "java/safe/SafeCrossFunctionDotdot.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-safe-prepared-001",
|
|
"file": "java/safe/safe_prepared_statement.java",
|
|
"language": "java",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-sqli-001",
|
|
"file": "java/sqli/SqliConcat.java",
|
|
"language": "java",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"java.sqli.execute_concat",
|
|
"taint-unsanitised-flow (source 6:21)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"cfg-resource-leak"
|
|
],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"cfg-resource-leak",
|
|
"java.sqli.execute_concat",
|
|
"taint-unsanitised-flow (source 6:21)"
|
|
],
|
|
"security_finding_count": 4,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-sqli-002",
|
|
"file": "java/sqli/SqliFormat.java",
|
|
"language": "java",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 6:21)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"cfg-resource-leak"
|
|
],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"cfg-resource-leak",
|
|
"taint-unsanitised-flow (source 6:21)"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-sqli-stmt-001",
|
|
"file": "java/sqli/sqli_statement_vs_prepared.java",
|
|
"language": "java",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 7:21)",
|
|
"taint-unsanitised-flow (source 7:21)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"java.sqli.execute_concat",
|
|
"java.xss.getwriter_print"
|
|
],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"java.sqli.execute_concat",
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 7:21)",
|
|
"java.xss.getwriter_print",
|
|
"taint-unsanitised-flow (source 7:21)"
|
|
],
|
|
"security_finding_count": 6,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-ssrf-001",
|
|
"file": "java/ssrf/SsrfRequest.java",
|
|
"language": "java",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 7:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 7:22)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-ssrf-002",
|
|
"file": "java/ssrf/SsrfHttpClient.java",
|
|
"language": "java",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 7:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 7:22)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "java-xss-001",
|
|
"file": "java/xss/XssReflected.java",
|
|
"language": "java",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:23)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:23)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-allowlist-dispatch-001",
|
|
"file": "javascript/safe/safe_switch_dispatch.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-cmdi-001",
|
|
"file": "javascript/cmdi/cmdi_direct.js",
|
|
"language": "javascript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:17)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-cmdi-002",
|
|
"file": "javascript/cmdi/cmdi_indirect.js",
|
|
"language": "javascript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-code_injection-001",
|
|
"file": "javascript/code_injection/code_injection.js",
|
|
"language": "javascript",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"js.code_exec.eval",
|
|
"taint-unsanitised-flow (source 3:18)",
|
|
"taint-unsanitised-flow (source 3:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"js.code_exec.eval",
|
|
"taint-unsanitised-flow (source 3:18)",
|
|
"taint-unsanitised-flow (source 3:18)"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-code_injection-002",
|
|
"file": "javascript/code_injection/code_injection_indirect.js",
|
|
"language": "javascript",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 3:21)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"js.code_exec.new_function"
|
|
],
|
|
"all_finding_ids": [
|
|
"js.code_exec.new_function",
|
|
"taint-unsanitised-flow (source 3:21)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-destructure-sanitize-001",
|
|
"file": "javascript/safe/safe_object_destructure_sanitize.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-destructure-vuln-001",
|
|
"file": "javascript/xss/vuln_object_destructure_no_sanitize.js",
|
|
"language": "javascript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 8:21)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 8:21)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-interproc-001",
|
|
"file": "javascript/interprocedural/interproc_taint_propagation.js",
|
|
"language": "javascript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 9:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 9:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-interproc-safe-001",
|
|
"file": "javascript/interprocedural/interproc_sanitizer_wrap.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-path_traversal-001",
|
|
"file": "javascript/path_traversal/path_traversal.js",
|
|
"language": "javascript",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-pathprune-safe-001",
|
|
"file": "javascript/path_pruning/safe_early_return.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-001",
|
|
"file": "javascript/safe/safe_constant.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-002",
|
|
"file": "javascript/safe/safe_dominated.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-003",
|
|
"file": "javascript/safe/safe_interprocedural.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-004",
|
|
"file": "javascript/safe/safe_non_security_sink.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-005",
|
|
"file": "javascript/safe/safe_reassigned.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-006",
|
|
"file": "javascript/safe/safe_sanitized.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-007",
|
|
"file": "javascript/safe/safe_type_check.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-008",
|
|
"file": "javascript/safe/safe_validated.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-014",
|
|
"file": "javascript/safe/safe_direct_path_sanitizer.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-015",
|
|
"file": "javascript/safe/safe_null_path_sanitizer.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-016",
|
|
"file": "javascript/safe/safe_cross_function_dotdot.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-parseInt-001",
|
|
"file": "javascript/safe/safe_parseInt.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-realrepo-001",
|
|
"file": "javascript/safe/safe_dom_globals_and_methods.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-safe-realrepo-002",
|
|
"file": "javascript/safe/safe_happy_path_error_check.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-sqli-001",
|
|
"file": "javascript/sqli/sqli_concat.js",
|
|
"language": "javascript",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"js.code_exec.eval",
|
|
"taint-unsanitised-flow (source 3:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"js.code_exec.eval",
|
|
"taint-unsanitised-flow (source 3:19)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-sqli-002",
|
|
"file": "javascript/sqli/sqli_template.js",
|
|
"language": "javascript",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"js.code_exec.eval",
|
|
"taint-unsanitised-flow (source 3:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"js.code_exec.eval",
|
|
"taint-unsanitised-flow (source 3:19)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-ssrf-001",
|
|
"file": "javascript/ssrf/ssrf_fetch.js",
|
|
"language": "javascript",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 3:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 3:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-ssrf-002",
|
|
"file": "javascript/ssrf/ssrf_axios.js",
|
|
"language": "javascript",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-ssrf-safe-001",
|
|
"file": "javascript/ssrf/safe_ssrf_hardcoded.js",
|
|
"language": "javascript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-xss-001",
|
|
"file": "javascript/xss/xss_reflected.js",
|
|
"language": "javascript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 3:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 3:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-xss-002",
|
|
"file": "javascript/xss/xss_document_write.js",
|
|
"language": "javascript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"js.xss.document_write",
|
|
"taint-unsanitised-flow (source 3:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"js.xss.document_write",
|
|
"taint-unsanitised-flow (source 3:18)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-xss-003",
|
|
"file": "javascript/xss/xss_location.js",
|
|
"language": "javascript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"js.xss.location_assign",
|
|
"taint-unsanitised-flow (source 3:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"js.xss.location_assign",
|
|
"taint-unsanitised-flow (source 3:22)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-xss-cross-001",
|
|
"file": "javascript/xss/cross_propagation/",
|
|
"language": "javascript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"js.xss.document_write",
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"js.xss.document_write",
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "js-xss-react-001",
|
|
"file": "javascript/xss/xss_react_dangerously.js",
|
|
"language": "javascript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:21)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:21)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-cmdi-001",
|
|
"file": "php/cmdi/cmdi_direct.php",
|
|
"language": "php",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"php.cmdi.system",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"php.cmdi.system",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-cmdi-002",
|
|
"file": "php/cmdi/cmdi_indirect.php",
|
|
"language": "php",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"php.cmdi.system",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"php.cmdi.system",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-code_injection-001",
|
|
"file": "php/code_injection/code_injection.php",
|
|
"language": "php",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"php.code_exec.eval",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"php.code_exec.eval",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-code_injection-002",
|
|
"file": "php/code_injection/code_injection_assert.php",
|
|
"language": "php",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-deser-001",
|
|
"file": "php/deser/deser_unserialize.php",
|
|
"language": "php",
|
|
"vuln_class": "deser",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"php.deser.unserialize",
|
|
"taint-unsanitised-flow (source 2:1)",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"php.deser.unserialize",
|
|
"taint-unsanitised-flow (source 2:1)",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-interproc-001",
|
|
"file": "php/interprocedural/interproc_taint_propagation.php",
|
|
"language": "php",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 7:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 7:1)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-interproc-safe-001",
|
|
"file": "php/interprocedural/interproc_sanitizer_wrap.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-isgranted-001",
|
|
"file": "php/auth/safe_isgranted.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-isgranted-vuln-001",
|
|
"file": "php/auth/vuln_no_isgranted.php",
|
|
"language": "php",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:1)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-path_traversal-001",
|
|
"file": "php/path_traversal/path_traversal.php",
|
|
"language": "php",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-path_traversal-002",
|
|
"file": "php/path_traversal/path_traversal_copy.php",
|
|
"language": "php",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-001",
|
|
"file": "php/safe/safe_constant.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-002",
|
|
"file": "php/safe/safe_dominated.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-003",
|
|
"file": "php/safe/safe_interprocedural.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-004",
|
|
"file": "php/safe/safe_non_security_sink.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-005",
|
|
"file": "php/safe/safe_reassigned.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-006",
|
|
"file": "php/safe/safe_sanitized.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-007",
|
|
"file": "php/safe/safe_type_check.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-008",
|
|
"file": "php/safe/safe_validated.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-014",
|
|
"file": "php/safe/safe_direct_path_sanitizer.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-015",
|
|
"file": "php/safe/safe_nullable_path_sanitizer.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-016",
|
|
"file": "php/safe/safe_cross_function_dotdot.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-safe-filter-001",
|
|
"file": "php/safe/safe_filter_input.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-sqli-001",
|
|
"file": "php/sqli/sqli_concat.php",
|
|
"language": "php",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-sqli-002",
|
|
"file": "php/sqli/sqli_sprintf.php",
|
|
"language": "php",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-sqli-pdo-001",
|
|
"file": "php/sqli/sqli_pdo_raw.php",
|
|
"language": "php",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-ssrf-001",
|
|
"file": "php/ssrf/ssrf_curl.php",
|
|
"language": "php",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:1)",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:1)",
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-ssrf-safe-001",
|
|
"file": "php/ssrf/safe_ssrf_hardcoded.php",
|
|
"language": "php",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "php-xss-001",
|
|
"file": "php/xss/xss_reflected.php",
|
|
"language": "php",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:1)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-auth-decorator-001",
|
|
"file": "python/safe/safe_login_required_decorator.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-auth-decorator-vuln-001",
|
|
"file": "python/auth/vuln_no_auth_decorator.py",
|
|
"language": "python",
|
|
"vuln_class": "auth",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"cfg-auth-gap"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"cfg-auth-gap"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-cmdi-001",
|
|
"file": "python/cmdi/cmdi_direct.py",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 5:11)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 5:11)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-cmdi-002",
|
|
"file": "python/cmdi/cmdi_indirect.py",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.cmdi.subprocess_shell",
|
|
"taint-unsanitised-flow (source 5:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.cmdi.subprocess_shell",
|
|
"taint-unsanitised-flow (source 5:12)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-cmdi-cross-001",
|
|
"file": "python/cmdi/cross_propagation/",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 4:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 4:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-cmdi-cross-002",
|
|
"file": "python/cmdi/cross_source/",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.cmdi.subprocess_shell"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.cmdi.subprocess_shell"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-cmdi-cross-003",
|
|
"file": "python/cmdi/cross_sanitizer/",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 4:1)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 4:1)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-cmdi-cross-004",
|
|
"file": "python/cmdi/cross_indirect_sink/",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 6:5)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 6:5)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-cmdi-popen-001",
|
|
"file": "python/cmdi/cmdi_popen_shell.py",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 5:11)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"py.cmdi.subprocess_shell"
|
|
],
|
|
"all_finding_ids": [
|
|
"py.cmdi.subprocess_shell",
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 5:11)"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-code_injection-001",
|
|
"file": "python/code_injection/code_injection.py",
|
|
"language": "python",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.code_exec.eval",
|
|
"taint-unsanitised-flow (source 4:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.code_exec.eval",
|
|
"taint-unsanitised-flow (source 4:12)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-code_injection-002",
|
|
"file": "python/code_injection/code_injection_exec.py",
|
|
"language": "python",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.code_exec.exec",
|
|
"taint-unsanitised-flow (source 4:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.code_exec.exec",
|
|
"taint-unsanitised-flow (source 4:12)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-context-sanitize-001",
|
|
"file": "python/safe/safe_with_context_sanitize.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-deser-001",
|
|
"file": "python/deser/deser_pickle.py",
|
|
"language": "python",
|
|
"vuln_class": "deser",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"py.deser.pickle_loads",
|
|
"taint-unsanitised-flow (source 5:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"py.deser.pickle_loads",
|
|
"taint-unsanitised-flow (source 5:12)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-interproc-001",
|
|
"file": "python/interprocedural/interproc_taint_propagation.py",
|
|
"language": "python",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 8:9)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"py.cmdi.os_system"
|
|
],
|
|
"all_finding_ids": [
|
|
"py.cmdi.os_system",
|
|
"taint-unsanitised-flow (source 8:9)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-interproc-safe-001",
|
|
"file": "python/interprocedural/interproc_sanitizer_wrap.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-path_traversal-001",
|
|
"file": "python/path_traversal/path_traversal.py",
|
|
"language": "python",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:12)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-pathprune-safe-001",
|
|
"file": "python/path_pruning/safe_early_return.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-001",
|
|
"file": "python/safe/safe_constant.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-002",
|
|
"file": "python/safe/safe_dominated.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-003",
|
|
"file": "python/safe/safe_interprocedural.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-004",
|
|
"file": "python/safe/safe_non_security_sink.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-005",
|
|
"file": "python/safe/safe_reassigned.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-006",
|
|
"file": "python/safe/safe_sanitized.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-007",
|
|
"file": "python/safe/safe_type_check.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-008",
|
|
"file": "python/safe/safe_validated.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-014",
|
|
"file": "python/safe/safe_direct_path_sanitizer.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-015",
|
|
"file": "python/safe/safe_optional_path_sanitizer.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-016",
|
|
"file": "python/safe/safe_cross_function_dotdot.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-safe-int-001",
|
|
"file": "python/safe/safe_int_cast.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-sqli-001",
|
|
"file": "python/sqli/sqli_concat.py",
|
|
"language": "python",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"taint-unsanitised-flow (source 5:15)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"cfg-resource-leak",
|
|
"py.sqli.execute_format"
|
|
],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"cfg-resource-leak",
|
|
"py.sqli.execute_format",
|
|
"taint-unsanitised-flow (source 5:15)"
|
|
],
|
|
"security_finding_count": 4,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-sqli-002",
|
|
"file": "python/sqli/sqli_format.py",
|
|
"language": "python",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"state-resource-leak",
|
|
"py.sqli.execute_format",
|
|
"taint-unsanitised-flow (source 5:15)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"cfg-resource-leak"
|
|
],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"cfg-resource-leak",
|
|
"py.sqli.execute_format",
|
|
"taint-unsanitised-flow (source 5:15)"
|
|
],
|
|
"security_finding_count": 4,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-ssrf-001",
|
|
"file": "python/ssrf/ssrf_requests.py",
|
|
"language": "python",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:11)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:11)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-ssrf-002",
|
|
"file": "python/ssrf/ssrf_httpx_post.py",
|
|
"language": "python",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:11)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:11)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-ssrf-safe-001",
|
|
"file": "python/ssrf/safe_ssrf_constant.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-validator-sentinel-001",
|
|
"file": "python/safe/safe_validator_sentinel.py",
|
|
"language": "python",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-validator-sentinel-vuln-001",
|
|
"file": "python/sqli/vuln_validator_sentinel_bypass.py",
|
|
"language": "python",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 17:11)"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"state-resource-leak",
|
|
"py.sqli.execute_format"
|
|
],
|
|
"all_finding_ids": [
|
|
"state-resource-leak",
|
|
"py.sqli.execute_format",
|
|
"taint-unsanitised-flow (source 17:11)"
|
|
],
|
|
"security_finding_count": 3,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-xss-001",
|
|
"file": "python/xss/xss_reflected.py",
|
|
"language": "python",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:12)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "py-xss-002",
|
|
"file": "python/xss/xss_template_string.py",
|
|
"language": "python",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:12)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 5:12)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rb-interproc-001",
|
|
"file": "ruby/interprocedural/interproc_taint_propagation.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "FN",
|
|
"outcome_location_level": "FN",
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [
|
|
"cfg-unguarded-sink"
|
|
],
|
|
"all_finding_ids": [
|
|
"cfg-unguarded-sink"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rb-interproc-safe-001",
|
|
"file": "ruby/interprocedural/interproc_sanitizer_wrap.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rb-safe-014",
|
|
"file": "ruby/safe/safe_direct_path_sanitizer.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rb-safe-015",
|
|
"file": "ruby/safe/safe_nil_path_sanitizer.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rb-safe-016",
|
|
"file": "ruby/safe/safe_cross_function_dotdot.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-001",
|
|
"file": "rust/auth/actix_scoped_write_missing.rs",
|
|
"language": "rust",
|
|
"vuln_class": "auth",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rs.auth.missing_ownership_check"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.auth.missing_ownership_check"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-002",
|
|
"file": "rust/auth/true_positive_missing_check.rs",
|
|
"language": "rust",
|
|
"vuln_class": "auth",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rs.auth.missing_ownership_check"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.auth.missing_ownership_check"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-003",
|
|
"file": "rust/auth/row_ownership_no_early_exit.rs",
|
|
"language": "rust",
|
|
"vuln_class": "auth",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rs.auth.missing_ownership_check"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.auth.missing_ownership_check"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-101",
|
|
"file": "rust/auth/hashmap_local_noise.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-102",
|
|
"file": "rust/auth/helper_scoped_params.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-103",
|
|
"file": "rust/auth/row_ownership_equality.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-104",
|
|
"file": "rust/auth/self_scoped_user.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-105",
|
|
"file": "rust/auth/db_connection_type_inferred.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-auth-106",
|
|
"file": "rust/auth/sql_join_acl.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-107",
|
|
"file": "rust/auth/transitive_helper.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-realrepo-001",
|
|
"file": "rust/auth/self_actor_uid_copy.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-realrepo-002",
|
|
"file": "rust/auth/require_resource_role_helper.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-auth-realrepo-003",
|
|
"file": "rust/auth/self_publish_email.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-001",
|
|
"file": "rust/cmdi/cmdi_command.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:15)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:15)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-002",
|
|
"file": "rust/cmdi/cmdi_command_output.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-003",
|
|
"file": "rust/cmdi/cmdi_indirect.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 9:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 9:17)",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-004",
|
|
"file": "rust/cmdi/cmdi_args.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:20)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:20)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-005",
|
|
"file": "rust/cmdi/cmdi_format_macro.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-006",
|
|
"file": "rust/cmdi/cmdi_match_source.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:22)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-007",
|
|
"file": "rust/cmdi/cmdi_string_concat.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-008",
|
|
"file": "rust/cmdi/cmdi_static_map_dangerous.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:15)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 6:15)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-009",
|
|
"file": "rust/cmdi/cmdi_indirect_multisink.rs",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 10:13)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 10:13)",
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 4
|
|
},
|
|
{
|
|
"case_id": "rs-cmdi-cross-001",
|
|
"file": "rust/cmdi/cross_propagation/",
|
|
"language": "rust",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 7:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 7:17)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-deser-001",
|
|
"file": "rust/deser/deser_serde_yaml.rs",
|
|
"language": "rust",
|
|
"vuln_class": "deser",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 8:15)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 8:15)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-path-001",
|
|
"file": "rust/path_traversal/path_read.rs",
|
|
"language": "rust",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-path-002",
|
|
"file": "rust/path_traversal/path_write.rs",
|
|
"language": "rust",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-path-003",
|
|
"file": "rust/path_traversal/path_file_open.rs",
|
|
"language": "rust",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-path-004",
|
|
"file": "rust/path_traversal/path_file_create.rs",
|
|
"language": "rust",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-path-005",
|
|
"file": "rust/path_traversal/path_remove.rs",
|
|
"language": "rust",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-path-006",
|
|
"file": "rust/traversal/traversal_no_sanitizer.rs",
|
|
"language": "rust",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 10:15)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 10:15)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-safe-001",
|
|
"file": "rust/safe/safe_constant.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-safe-002",
|
|
"file": "rust/safe/safe_sanitized_shell.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-safe-003",
|
|
"file": "rust/safe/safe_reassigned.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-safe-004",
|
|
"file": "rust/safe/safe_validated.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.panic_macro",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 3
|
|
},
|
|
{
|
|
"case_id": "rs-safe-005",
|
|
"file": "rust/safe/safe_hardcoded_url.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "rs-safe-006",
|
|
"file": "rust/safe/safe_type_check.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.expect",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 3
|
|
},
|
|
{
|
|
"case_id": "rs-safe-007",
|
|
"file": "rust/safe/safe_interprocedural.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-safe-008",
|
|
"file": "rust/safe/safe_dominated.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-safe-009",
|
|
"file": "rust/safe/safe_shell_metachar.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-safe-009",
|
|
"file": "rust/safe/safe_match_guard.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-safe-010",
|
|
"file": "rust/safe/safe_static_map_lookup.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-safe-011",
|
|
"file": "rust/safe/safe_parsed_port.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.expect",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 3
|
|
},
|
|
{
|
|
"case_id": "rs-safe-012",
|
|
"file": "rust/safe/safe_path_contains_dotdot.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-safe-014",
|
|
"file": "rust/safe/safe_option_sanitizer.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-safe-015",
|
|
"file": "rust/safe/safe_path_is_absolute.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-safe-016",
|
|
"file": "rust/safe/safe_cross_function_dotdot.rs",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-safe-cross-001",
|
|
"file": "rust/cmdi/cross_sanitizer/",
|
|
"language": "rust",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 2
|
|
},
|
|
{
|
|
"case_id": "rs-sqli-001",
|
|
"file": "rust/sqli/sqli_rusqlite_format.rs",
|
|
"language": "rust",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 3
|
|
},
|
|
{
|
|
"case_id": "rs-sqli-002",
|
|
"file": "rust/sqli/sqli_metachar_gate_wrong_sink.rs",
|
|
"language": "rust",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 5:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 3
|
|
},
|
|
{
|
|
"case_id": "rs-ssrf-001",
|
|
"file": "rust/ssrf/ssrf_reqwest.rs",
|
|
"language": "rust",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:15)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 4:15)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-ssrf-002",
|
|
"file": "rust/ssrf/ssrf_indirect.rs",
|
|
"language": "rust",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 8:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 8:18)",
|
|
"rs.quality.unwrap"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-ssrf-003",
|
|
"file": "rust/ssrf/ssrf_client_builder.rs",
|
|
"language": "rust",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:15)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rs.quality.unwrap",
|
|
"taint-unsanitised-flow (source 4:15)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "rs-xss-001",
|
|
"file": "rust/xss/axum_html/",
|
|
"language": "rust",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 3:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 3:16)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-before-action-001",
|
|
"file": "ruby/auth/safe_before_action.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-cmdi-001",
|
|
"file": "ruby/cmdi/cmdi_system.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rb.cmdi.system_interp",
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rb.cmdi.system_interp",
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-cmdi-002",
|
|
"file": "ruby/cmdi/cmdi_backtick.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rb.cmdi.backtick",
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rb.cmdi.backtick",
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-code_injection-001",
|
|
"file": "ruby/code_injection/code_injection_eval.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rb.code_exec.eval",
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rb.code_exec.eval",
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-deser-001",
|
|
"file": "ruby/deser/deser_marshal.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "deser",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rb.deser.marshal_load",
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rb.deser.marshal_load",
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-deser-002",
|
|
"file": "ruby/deser/deser_yaml.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "deser",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"rb.deser.yaml_load",
|
|
"taint-unsanitised-flow (source 4:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"rb.deser.yaml_load",
|
|
"taint-unsanitised-flow (source 4:3)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-path_traversal-001",
|
|
"file": "ruby/path_traversal/path_traversal_send_file.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-001",
|
|
"file": "ruby/safe/safe_constant.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-002",
|
|
"file": "ruby/safe/safe_dominated.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-003",
|
|
"file": "ruby/safe/safe_interprocedural.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-004",
|
|
"file": "ruby/safe/safe_non_security_sink.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-005",
|
|
"file": "ruby/safe/safe_reassigned.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-006",
|
|
"file": "ruby/safe/safe_sanitized.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-007",
|
|
"file": "ruby/safe/safe_type_check.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-008",
|
|
"file": "ruby/safe/safe_validated.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-safe-strong-params-001",
|
|
"file": "ruby/safe/safe_strong_params.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-sqli-001",
|
|
"file": "ruby/sqli/sqli_find_by_sql.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-sqli-002",
|
|
"file": "ruby/sqli/sqli_execute.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-ssrf-001",
|
|
"file": "ruby/ssrf/ssrf_httparty.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:3)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-ssrf-002",
|
|
"file": "ruby/ssrf/ssrf_net_http.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:3)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-ssrf-safe-001",
|
|
"file": "ruby/ssrf/safe_ssrf_hardcoded.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-xss-001",
|
|
"file": "ruby/xss/xss_html_safe.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ruby-xss-002",
|
|
"file": "ruby/xss/xss_raw.rb",
|
|
"language": "ruby",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 2:3)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-cmdi-001",
|
|
"file": "typescript/cmdi/cmdi_exec_template.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:22)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-cmdi-002",
|
|
"file": "typescript/cmdi/cmdi_async_wrapper.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 8:18)",
|
|
"taint-unsanitised-flow (source 8:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 8:18)",
|
|
"taint-unsanitised-flow (source 8:18)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-code_injection-001",
|
|
"file": "typescript/code_injection/code_exec_eval.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:18)",
|
|
"ts.code_exec.eval"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:18)",
|
|
"ts.code_exec.eval"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-code_injection-002",
|
|
"file": "typescript/code_injection/code_exec_new_function.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "code_injection",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"ts.code_exec.new_function",
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"ts.code_exec.new_function",
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-crypto-001",
|
|
"file": "typescript/crypto/weak_hash_md5.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "crypto",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"ts.crypto.weak_hash_import"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"ts.crypto.weak_hash_import"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-iife-closure-001",
|
|
"file": "typescript/safe/safe_iife_closure_sanitizer.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-iife-closure-vuln-001",
|
|
"file": "typescript/xss/vuln_iife_closure_no_sanitizer.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 14:22)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 14:22)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-insecure_config-001",
|
|
"file": "typescript/insecure_config/reject_unauthorized.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "insecure_config",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"ts.config.reject_unauthorized"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"ts.config.reject_unauthorized"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-insecure_config-002",
|
|
"file": "typescript/insecure_config/cookie_httponly.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "insecure_config",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"ts.config.insecure_session_httponly"
|
|
],
|
|
"unexpected_rule_ids": [
|
|
"ts.secrets.hardcoded_secret"
|
|
],
|
|
"all_finding_ids": [
|
|
"ts.secrets.hardcoded_secret",
|
|
"ts.config.insecure_session_httponly"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-interproc-001",
|
|
"file": "typescript/interprocedural/interproc_class_method.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 13:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 13:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-open_redirect-001",
|
|
"file": "typescript/open_redirect/location_href.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:16)",
|
|
"ts.xss.location_assign"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:16)",
|
|
"ts.xss.location_assign"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-path_traversal-001",
|
|
"file": "typescript/path_traversal/path_traversal_sendfile.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "path_traversal",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-prototype-001",
|
|
"file": "typescript/prototype/proto_assignment.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "prototype",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"ts.prototype.proto_assignment"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"ts.prototype.proto_assignment",
|
|
"ts.quality.as_any"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "ts-safe-001",
|
|
"file": "typescript/safe/safe_dompurify.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-002",
|
|
"file": "typescript/safe/safe_number_coerce.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-003",
|
|
"file": "typescript/safe/safe_encode_uri.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-004",
|
|
"file": "typescript/safe/safe_hardcoded_url.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-005",
|
|
"file": "typescript/safe/safe_validator_escape.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-006",
|
|
"file": "typescript/safe/safe_typeof_guard.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-007",
|
|
"file": "typescript/safe/safe_interproc_sanitizer.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-008",
|
|
"file": "typescript/safe/safe_constant_query.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-009",
|
|
"file": "typescript/safe/safe_parameterized.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-010",
|
|
"file": "typescript/safe/safe_jsx_text.tsx",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-014",
|
|
"file": "typescript/safe/safe_direct_path_sanitizer.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-015",
|
|
"file": "typescript/safe/safe_null_path_sanitizer.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-safe-016",
|
|
"file": "typescript/safe/safe_cross_function_dotdot.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "safe",
|
|
"is_vulnerable": false,
|
|
"outcome_file_level": "TN",
|
|
"outcome_rule_level": "TN",
|
|
"outcome_location_level": null,
|
|
"matched_rule_ids": [],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [],
|
|
"security_finding_count": 0,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-secrets-001",
|
|
"file": "typescript/secrets/fallback_secret.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "secrets",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"ts.secrets.fallback_secret"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"ts.secrets.fallback_secret"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-sqli-001",
|
|
"file": "typescript/sqli/sqli_template_literal.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 7:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 7:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-sqli-002",
|
|
"file": "typescript/sqli/sqli_prisma_raw.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "sqli",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 7:20)",
|
|
"taint-unsanitised-flow (source 7:20)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 7:20)",
|
|
"taint-unsanitised-flow (source 7:20)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-ssrf-001",
|
|
"file": "typescript/ssrf/ssrf_axios_user_url.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-ssrf-002",
|
|
"file": "typescript/ssrf/ssrf_fastify_fetch.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 7:52)",
|
|
"taint-unsanitised-flow (source 7:52)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 7:52)",
|
|
"taint-unsanitised-flow (source 7:52)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-ssrf-003",
|
|
"file": "typescript/ssrf/ssrf_encoded_host.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "ssrf",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-type_system-001",
|
|
"file": "typescript/type_system/discriminated_union_narrow.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"cfg-unguarded-sink"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"cfg-unguarded-sink"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-type_system-002",
|
|
"file": "typescript/type_system/interface_dispatch.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 17:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 17:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-type_system-003",
|
|
"file": "typescript/type_system/decorator_passthrough.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "cmdi",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 14:5)",
|
|
"taint-unsanitised-flow (source 21:16)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 14:5)",
|
|
"taint-unsanitised-flow (source 21:16)"
|
|
],
|
|
"security_finding_count": 2,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-xss-001",
|
|
"file": "typescript/xss/xss_typed_innerhtml.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-xss-002",
|
|
"file": "typescript/xss/xss_as_any_cast.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"ts.quality.as_any",
|
|
"taint-unsanitised-flow (source 4:17)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 1
|
|
},
|
|
{
|
|
"case_id": "ts-xss-003",
|
|
"file": "typescript/xss/xss_generic_identity.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 8:18)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 8:18)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-xss-004",
|
|
"file": "typescript/xss/xss_optional_chain_source.ts",
|
|
"language": "typescript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 4:19)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 4:19)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
},
|
|
{
|
|
"case_id": "ts-xss-005",
|
|
"file": "typescript/xss/xss_dangerously_set_inner_html.tsx",
|
|
"language": "typescript",
|
|
"vuln_class": "xss",
|
|
"is_vulnerable": true,
|
|
"outcome_file_level": "TP",
|
|
"outcome_rule_level": "TP",
|
|
"outcome_location_level": "TP",
|
|
"matched_rule_ids": [
|
|
"taint-unsanitised-flow (source 6:17)"
|
|
],
|
|
"unexpected_rule_ids": [],
|
|
"all_finding_ids": [
|
|
"taint-unsanitised-flow (source 6:17)"
|
|
],
|
|
"security_finding_count": 1,
|
|
"non_security_finding_count": 0
|
|
}
|
|
],
|
|
"aggregate_file_level": {
|
|
"tp": 186,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 176,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"aggregate_rule_level": {
|
|
"tp": 185,
|
|
"fp": 0,
|
|
"fn_": 1,
|
|
"tn": 176,
|
|
"precision": 1.0,
|
|
"recall": 0.9946236559139785,
|
|
"f1": 0.9973045822102425
|
|
},
|
|
"by_language": {
|
|
"c": {
|
|
"tp": 14,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 13,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"cpp": {
|
|
"tp": 14,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 13,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"go": {
|
|
"tp": 17,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 16,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"java": {
|
|
"tp": 16,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 16,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"javascript": {
|
|
"tp": 17,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 20,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"php": {
|
|
"tp": 16,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 17,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"python": {
|
|
"tp": 22,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 20,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"ruby": {
|
|
"tp": 13,
|
|
"fp": 0,
|
|
"fn_": 1,
|
|
"tn": 16,
|
|
"precision": 1.0,
|
|
"recall": 0.9285714285714286,
|
|
"f1": 0.962962962962963
|
|
},
|
|
"rust": {
|
|
"tp": 29,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 30,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"typescript": {
|
|
"tp": 27,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 15,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
}
|
|
},
|
|
"by_vuln_class": {
|
|
"auth": {
|
|
"tp": 4,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"buffer_overflow": {
|
|
"tp": 5,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"cmdi": {
|
|
"tp": 50,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"code_exec": {
|
|
"tp": 2,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"code_injection": {
|
|
"tp": 10,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"crypto": {
|
|
"tp": 1,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"deser": {
|
|
"tp": 7,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"deserialization": {
|
|
"tp": 4,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"fmt_string": {
|
|
"tp": 5,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"insecure_config": {
|
|
"tp": 2,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"memory_safety": {
|
|
"tp": 3,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"path_traversal": {
|
|
"tp": 21,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"prototype": {
|
|
"tp": 1,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"safe": {
|
|
"tp": 0,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 176,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"secrets": {
|
|
"tp": 1,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"sqli": {
|
|
"tp": 25,
|
|
"fp": 0,
|
|
"fn_": 1,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 0.9615384615384616,
|
|
"f1": 0.9803921568627451
|
|
},
|
|
"ssrf": {
|
|
"tp": 21,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
},
|
|
"xss": {
|
|
"tp": 23,
|
|
"fp": 0,
|
|
"fn_": 0,
|
|
"tn": 0,
|
|
"precision": 1.0,
|
|
"recall": 1.0,
|
|
"f1": 1.0
|
|
}
|
|
},
|
|
"by_confidence": {
|
|
">=High": {
|
|
"tp": 85,
|
|
"fp": 87,
|
|
"fn_": 101,
|
|
"tn": 89,
|
|
"precision": 0.4941860465116279,
|
|
"recall": 0.45698924731182794,
|
|
"f1": 0.47486033519553067
|
|
},
|
|
">=Low": {
|
|
"tp": 86,
|
|
"fp": 90,
|
|
"fn_": 100,
|
|
"tn": 86,
|
|
"precision": 0.48863636363636365,
|
|
"recall": 0.46236559139784944,
|
|
"f1": 0.47513812154696133
|
|
},
|
|
">=Medium": {
|
|
"tp": 86,
|
|
"fp": 90,
|
|
"fn_": 100,
|
|
"tn": 86,
|
|
"precision": 0.48863636363636365,
|
|
"recall": 0.46236559139784944,
|
|
"f1": 0.47513812154696133
|
|
}
|
|
}
|
|
} |