org.sonar.plugins.csharp.S5773.json Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of sonar-csharp-plugin Show documentation

Code Analyzer for C#

There is a newer version: 10.2.0.105762

{
  "title": "Types allowed to be deserialized should be restricted",
  "type": "VULNERABILITY",
  "code": {
    "impacts": {
      "SECURITY": "MEDIUM"
    },
    "attribute": "TRUSTWORTHY"
  },
  "status": "ready",
  "quickfix": "targeted",
  "remediation": {
    "func": "Constant\/Issue",
    "constantCost": "30min"
  },
  "tags": [
    "cwe"
  ],
  "defaultSeverity": "Major",
  "ruleSpecification": "RSPEC-5773",
  "sqKey": "S5773",
  "scope": "Main",
  "securityStandards": {
    "CWE": [
      502
    ],
    "OWASP": [
      "A8"
    ],
    "OWASP Top 10 2021": [
      "A8"
    ],
    "ASVS 4.0": [
      "1.5.2",
      "5.5.1",
      "5.5.3"
    ]
  }
}