Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How can I explain to the customer about false positive (Command Injection Fortify), Can you help me?

LUCAS | Last updated: Nov 04, 2022 01:56PM UTC

private void carregarProps() { props = new Properties(); FileInputStream file = null; try { file = new FileInputStream( "/suportedbdc_config/servfunc/ppra_gera_cotacao_ws/ppra_cotacao.properties"); props.load(file); ----> (Command Injection Fortify) } catch (FileNotFoundException e) { log.log_error(e, this.getClass()); } catch (IOException e) { log.log_error(e, this.getClass()); }finally { if(file!=null) { safeClose(file); } } }

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.