sreeramadasugiri (Community Member) asked a question.
How to resolve External Control of File Name or Path (CWE ID
73), FTPClient class object.listFiles(path)
73), FTPClient class object.listFiles(path)
Hi Team,
My code is,
FTPClient ftpClient = new FTPClient();
FTPFileInfo ftp = new FTPFileInfo();
--------------------------------
-----------------------------------
FTPFile[] files = ftpClient.listFiles(ftp.getFilePath());
if(files!=null)
{
for (FTPFile file : files) {
if (file.isFile()) {
--------------------
}
}
}.
I am getting vulnerabilities in line ftpClient.listFiles(ftp.getFilePath());, i searched multiple articles, but still i am not getting as i expected answer. Can you help me to resolve my issue (CWE ID 73) flaw issue.
.png){kind=logo}
Hi @sreeramadasugiri (Community Member),
please refer to my reply for this post: https://community.veracode.com/s/question/0D53n00008MnDUYCA3/how-to-resolve-external-control-of-file-name-or-path-cwe-id73-ftpclient-class-and-ftpclientobjectlistfilesdynamicpath-dynamic-path-in-java-code
Thank you,
Florian Walter