Test case 156459

Type: source code
State: bad
Author: IARPA STONESOUP Test and Evaluation team
Status: candidate
Language: Java
Application: cpe:2.3:a:apache:lucene:4.5.0:*:*:*:*:*:*:*
Submission Date: 06 Oct 2015

Description

This test takes in data from an argument, that is intended to contain parameters for an 'find' command. The test does not perform checks on the parameters, however, and it is possible to include other, unexpected commands as part of the find parameter set.

Metadata
-Base program: Apache Lucene
- Source Taint: SOCKET
- Data Type: simple
- Data Flow: var_arg_list
- Control Flow: recursive