Skip to content

Add cds utils modelling #206

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add cds utils modelling #206

wants to merge 1 commit into from

Conversation

knewbury01
Copy link
Contributor

What This PR Contributes

This PR overall contributes models for the cds.utils CAP module, the implementation of which can be found here and the documentation here. Specifically the model is comprised of :

  • sinks - functionality of the module that allows for file system manipulation (e.g. controlling which file is being read from or controlling which file is removed)
  • additional flow steps - functionality of the module that take a potentially user controlled value and return some representation of that value that is sufficiently unaltered that a path traversal attack could occur

Future Works

The next step of this work will be to include a query that uses CAP specific sources and these sinks to describe the specific potential path traversal vulnerability that could occur through this API

and test for model
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant