Description
This test takes in data from an argument, that is intended to contain parameters for an 'ls' command. The test does not perform checks for special characters, however, and it is possible to include other, unexpected commands as part of the ls parameter set.
Metadata
-Base program: Elastic Search
- Source Taint: FILE_CONTENTS
- Data Type: array
- Data Flow: basic
- Control Flow: function_invocation_overload
Flaws
Test Suites
Documentation
Have any comments on this test case? Please, send us an email.