Weakness (CWE)
CWE-1116: Inaccurate Source Code Comments
Base Incomplete
The source code contains comments that do not accurately
describe or explain aspects of the portion of the code with which the comment is
associated.
How to prevent it (1 mitigation)
-
Implementation
Verify that each comment accurately reflects what is intended to happen during execution of the code.
Source: MITRE CWE-1116
3 results · Clear filters · Feed
-
High 8.6
Refitter: C# source injection through OpenAPI path keys
Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, OpenAPI `paths`-object keys are emitted verbatim into Refit route attributes such as `[Get("<path>")]` without escaping quotation marks or restricting characters. …
-
High 7.5
PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted in…
-
High 7.8
An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-ist…