CWE coverage for Rust — CodeQL query help documentation

CWE-20 Rust rust/regex-injection Regular expression injection CWE-20 Rust rust/uncontrolled-allocation-size Uncontrolled allocation size CWE-22 Rust rust/path-injection Uncontrolled data used in path expression CWE-23 Rust rust/path-injection Uncontrolled data used in path expression CWE-36 Rust rust/path-injection Uncontrolled data used in path expression CWE-73 Rust rust/path-injection Uncontrolled data used in path expression CWE-74 Rust rust/regex-injection Regular expression injection CWE-74 Rust rust/path-injection Uncontrolled data used in path expression CWE-74 Rust rust/xss Cross-site scripting CWE-74 Rust rust/sql-injection Database query built from user-controlled sources CWE-79 Rust rust/xss Cross-site scripting CWE-89 Rust rust/sql-injection Database query built from user-controlled sources CWE-99 Rust rust/path-injection Uncontrolled data used in path expression CWE-116 Rust rust/xss Cross-site scripting CWE-116 Rust rust/log-injection Log injection CWE-117 Rust rust/log-injection Log injection CWE-118 Rust rust/access-after-lifetime-ended Access of a pointer after its lifetime has ended CWE-118 Rust rust/access-invalid-pointer Access of invalid pointer CWE-119 Rust rust/access-after-lifetime-ended Access of a pointer after its lifetime has ended CWE-119 Rust rust/access-invalid-pointer Access of invalid pointer CWE-200 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-259 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-284 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-287 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-295 Rust rust/disabled-certificate-check Disabled TLS certificate check CWE-311 Rust rust/cleartext-transmission Cleartext transmission of sensitive information CWE-311 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-311 Rust rust/cleartext-storage-database Cleartext storage of sensitive information in a database CWE-311 Rust rust/non-https-url Failure to use HTTPS URLs CWE-311 Rust rust/insecure-cookie 'Secure' attribute is not set to true CWE-312 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-312 Rust rust/cleartext-storage-database Cleartext storage of sensitive information in a database CWE-319 Rust rust/cleartext-transmission Cleartext transmission of sensitive information CWE-319 Rust rust/non-https-url Failure to use HTTPS URLs CWE-319 Rust rust/insecure-cookie 'Secure' attribute is not set to true CWE-321 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-326 Rust rust/weak-sensitive-data-hashing Use of a broken or weak cryptographic hashing algorithm on sensitive data CWE-327 Rust rust/weak-cryptographic-algorithm Use of a broken or weak cryptographic algorithm CWE-327 Rust rust/weak-sensitive-data-hashing Use of a broken or weak cryptographic hashing algorithm on sensitive data CWE-328 Rust rust/weak-sensitive-data-hashing Use of a broken or weak cryptographic hashing algorithm on sensitive data CWE-330 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-344 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-345 Rust rust/non-https-url Failure to use HTTPS URLs CWE-359 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-398 Rust rust/access-invalid-pointer Access of invalid pointer CWE-400 Rust rust/uncontrolled-allocation-size Uncontrolled allocation size CWE-441 Rust rust/request-forgery Server-side request forgery CWE-476 Rust rust/access-invalid-pointer Access of invalid pointer CWE-532 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-538 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-552 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-610 Rust rust/path-injection Uncontrolled data used in path expression CWE-610 Rust rust/request-forgery Server-side request forgery CWE-614 Rust rust/insecure-cookie 'Secure' attribute is not set to true CWE-642 Rust rust/path-injection Uncontrolled data used in path expression CWE-657 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-664 Rust rust/path-injection Uncontrolled data used in path expression CWE-664 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-664 Rust rust/cleartext-storage-database Cleartext storage of sensitive information in a database CWE-664 Rust rust/ctor-initialization Bad 'ctor' initialization CWE-664 Rust rust/uncontrolled-allocation-size Uncontrolled allocation size CWE-664 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-664 Rust rust/access-after-lifetime-ended Access of a pointer after its lifetime has ended CWE-664 Rust rust/access-invalid-pointer Access of invalid pointer CWE-664 Rust rust/request-forgery Server-side request forgery CWE-665 Rust rust/ctor-initialization Bad 'ctor' initialization CWE-665 Rust rust/uncontrolled-allocation-size Uncontrolled allocation size CWE-666 Rust rust/access-after-lifetime-ended Access of a pointer after its lifetime has ended CWE-666 Rust rust/access-invalid-pointer Access of invalid pointer CWE-668 Rust rust/path-injection Uncontrolled data used in path expression CWE-668 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-671 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-672 Rust rust/access-after-lifetime-ended Access of a pointer after its lifetime has ended CWE-672 Rust rust/access-invalid-pointer Access of invalid pointer CWE-691 Rust rust/ctor-initialization Bad 'ctor' initialization CWE-693 Rust rust/regex-injection Regular expression injection CWE-693 Rust rust/disabled-certificate-check Disabled TLS certificate check CWE-693 Rust rust/cleartext-transmission Cleartext transmission of sensitive information CWE-693 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-693 Rust rust/cleartext-storage-database Cleartext storage of sensitive information in a database CWE-693 Rust rust/non-https-url Failure to use HTTPS URLs CWE-693 Rust rust/weak-cryptographic-algorithm Use of a broken or weak cryptographic algorithm CWE-693 Rust rust/weak-sensitive-data-hashing Use of a broken or weak cryptographic hashing algorithm on sensitive data CWE-693 Rust rust/insecure-cookie 'Secure' attribute is not set to true CWE-693 Rust rust/uncontrolled-allocation-size Uncontrolled allocation size CWE-693 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-696 Rust rust/ctor-initialization Bad 'ctor' initialization CWE-706 Rust rust/path-injection Uncontrolled data used in path expression CWE-707 Rust rust/regex-injection Regular expression injection CWE-707 Rust rust/path-injection Uncontrolled data used in path expression CWE-707 Rust rust/xss Cross-site scripting CWE-707 Rust rust/sql-injection Database query built from user-controlled sources CWE-707 Rust rust/log-injection Log injection CWE-710 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-710 Rust rust/access-invalid-pointer Access of invalid pointer CWE-770 Rust rust/uncontrolled-allocation-size Uncontrolled allocation size CWE-789 Rust rust/uncontrolled-allocation-size Uncontrolled allocation size CWE-798 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value CWE-825 Rust rust/access-after-lifetime-ended Access of a pointer after its lifetime has ended CWE-825 Rust rust/access-invalid-pointer Access of invalid pointer CWE-916 Rust rust/weak-sensitive-data-hashing Use of a broken or weak cryptographic hashing algorithm on sensitive data CWE-918 Rust rust/request-forgery Server-side request forgery CWE-922 Rust rust/cleartext-logging Cleartext logging of sensitive information CWE-922 Rust rust/cleartext-storage-database Cleartext storage of sensitive information in a database CWE-943 Rust rust/sql-injection Database query built from user-controlled sources CWE-1204 Rust rust/hard-coded-cryptographic-value Hard-coded cryptographic value