SEC005
Unsafe command execution
Object Pascal — Delphi & Free Pascal
Error
Security
Process execution APIs become high-risk when arguments can be influenced by untrusted input
process execution APIs become high-risk when arguments can be influenced by untrusted input.
Why this severity
process execution APIs become high-risk when arguments can be influenced by untrusted input.
Known false positives
constant command invocations in tightly controlled maintenance tools.
Remediation example
if IsTrustedCommand(Command) then ExecuteWhitelisted(Command);