Package com.tonic.analysis.cpg.taint

Enum Severity

java.lang.Object

java.lang.Enum<Severity>

com.tonic.analysis.cpg.taint.Severity

All Implemented Interfaces:

Serializable, Comparable<Severity>

public enum Severity
extends Enum<Severity>

Severity ranking for taint findings, from informational to critical.

Enum Constant Summary

Enum Constants

Enum Constant	Description
CRITICAL	Reaches a sink that yields code or query execution outright - SQL injection, command injection, or insecure deserialization.
HIGH	Reaches a directly exploitable sink such as path traversal, cross-site scripting, LDAP or XPath injection, server-side request forgery, or unsafe reflection.
INFO	No action needed; a taint path that passes through a sanitizer is reported at this level whatever its sink is rated.
LOW	Reaches a sink whose misuse has limited impact, worth recording but not worth blocking on.
MEDIUM	Reaches a sink that is only exploitable in some contexts, such as log injection.

Method Summary

Modifier and Type	Method	Description
static Severity	valueOf(String name)	Returns the enum constant of this type with the specified name.
static Severity[]	values()	Returns an array containing the constants of this enum type, in the order they are declared.

Methods inherited from class java.lang.Enum

compareTo, equals, getDeclaringClass, hashCode, name, ordinal, toString, valueOf

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, wait, wait, wait

Enum Constant Detail

INFO

public static final Severity INFO

No action needed; a taint path that passes through a sanitizer is reported at this level whatever its sink is rated.

LOW

public static final Severity LOW

Reaches a sink whose misuse has limited impact, worth recording but not worth blocking on.

MEDIUM

public static final Severity MEDIUM

Reaches a sink that is only exploitable in some contexts, such as log injection.

HIGH

public static final Severity HIGH

Reaches a directly exploitable sink such as path traversal, cross-site scripting, LDAP or XPath injection, server-side request forgery, or unsafe reflection.

CRITICAL

public static final Severity CRITICAL

Reaches a sink that yields code or query execution outright - SQL injection, command injection, or insecure deserialization.

Method Detail

values

public static Severity[] values()

Returns an array containing the constants of this enum type, in the order they are declared. This method may be used to iterate over the constants as follows:

for (Severity c : Severity.values())
    System.out.println(c);

Returns:

an array containing the constants of this enum type, in the order they are declared

valueOf

public static Severity valueOf(String name)

Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)

Parameters:

name - the name of the enum constant to be returned.

Returns:

the enum constant with the specified name

Throws:

IllegalArgumentException - if this enum type has no constant with the specified name

NullPointerException - if the argument is null