AApple844294 (Community Member) asked a question.
How to fix a flaw found in third party - microsoft.diagnostics.tracing.traceevent.dll
In our project, the scan finds the following:
CWE-73 (External Control of File Name or Path) inClean(string) microsoft.diagnostics.tracing.traceevent.dll
This library is owned by Microsoft and is common to use for working with ETW.
How best would you suggest handling this if upgrading to the latest version does not fix it?
Thanks,
Amit
.png){kind=logo}
Hi @AApple844294 (Community Member),
I recommend reviewing the module selection for your scan. Ensure that only your first-party modules are selected as entry points. Further information can be found here.
Best regards,
Duncan