org.sonar.l10n.py.rules.python.S6786.json Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of python-checks Show documentation

There is a newer version: 4.23.0.17664

{
  "title": "GraphQL introspection should be disabled in production",
  "type": "VULNERABILITY",
  "status": "ready",
  "remediation": {
    "func": "Constant\/Issue",
    "constantCost": "1h"
  },
  "tags": [
    "cwe",
    "graphql"
  ],
  "defaultSeverity": "Major",
  "ruleSpecification": "RSPEC-6786",
  "sqKey": "S6786",
  "scope": "All",
  "quickfix": "unknown",
  "code": {
    "impacts": {
      "SECURITY": "MEDIUM"
    },
    "attribute": "TRUSTWORTHY"
  },
  "securityStandards": {
    "CWE": [
      200
    ],
    "OWASP": [
      "A3",
      "A6"
    ],
    "OWASP Top 10 2021": [
      "A5"
    ],
    "PCI DSS 3.2": [
      "6.5"
    ],
    "PCI DSS 4.0": [
      "6.2.4"
    ],
    "ASVS 4.0": [
      "13.1.3",
      "14.3.2"
    ]
  }
}