All rules →
Rules / C#
SHIELD-CSHARP-005

Command injection via ProcessStartInfo.Arguments from variable

highC#CWE-78CVSS 8.6

What it detects

ProcessStartInfo.Arguments is assigned a value derived from concatenation or a raw variable.

How to fix

Use ArgumentList with individually validated arguments instead of building a single Arguments string.

Scan your repo freeFull documentation
Back to all rules
SHIELD-CSHARP-005: Command injection via ProcessStartInfo.Arguments from variable — Zennoxa Shield