Strings FormatStringManipulation

Allowing user input to control format parameters could enable an attacker to cause exceptions to be thrown or leak information.Attackers may be able to modify the format string argument, such that an exception is thrown. If this exception is left uncaught, it may crash the application. Alternatively, if sensitive information is used within the unused argumen

IndexedPublic repositoryHighHigh confidenceVerifiedLGPL-3.0-onlyKotlin
greprules fetch gitlab-sast-rules-lgpl-kotlin-strings-rule-formatstringmanipulation --engine opengrep

Description

Allowing user input to control format parameters could enable an attacker to cause exceptions to be thrown or leak information.Attackers may be able to modify the format string argument, such that an exception is thrown. If this exception is left uncaught, it may crash the application. Alternatively, if sensitive information is used within the unused argumen