Amazon Q
Detector Library
C detectors (38/38)
Logging of sensitive informationInsecure Use Of ChrootDeadlock And Lock InconsistencyUnsafe File ExtensionNumeric Truncation ErrorOS command injectionIncorrect Use Of FreeInsecure Use strcat fnSQL injectionBitwise Operator On Signed OperandInsecure use gets fnRandom fd exhaustionHardcoded CredentialsRedundant Free UsageIncorrect default PermissionsInsecure Use MemsetDivide By Zero.Return Stack AddressUnchecked Return ValueIncorrect Format SpecifierPath traversalImproper Input ValidationImproper Null TerminationOut Of Bounds ReadInteger OverflowInsecure use strtok functionImproper size of a memory bufferUnused Assigned Variablesincomplete-cleanupNull pointer dereferenceInsecure Temporary File Or DirectoryInsecure Buffer AccessIncorrect Use Ato FnLoose File PermissionsCross-site Scripting.Exposure of Sensitive InformationOut-of-bounds WriteString Equality
Cross-site Scripting. High
This vulnerability occurs when user inputs are not properly checked or cleaned before being displayed on web pages. As a result, attackers can insert harmful scripts that may run in the browsers of other users. This can lead to unauthorized access, data theft, or other malicious actions. To protect against this issue, it's important to ensure that any user input is thoroughly sanitized before including it in web pages. Using tools and libraries that automatically handle escaping for HTML and JavaScript can help prevent these security risks. For more information, please visit https://owasp.org/www-community/attacks/xss.
