diff --git a/plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/CodeQLReader.java b/plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/CodeQLReader.java index 7577154..e52bf92 100644 --- a/plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/CodeQLReader.java +++ b/plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/CodeQLReader.java @@ -236,6 +236,9 @@ private int mapCWE(String ruleName, Integer cweNumber) { return cweNumber.intValue(); // Return CWE as is // These rules we care about, but have to map to the CWE we expect + case 94: // js/unsafe-dynamic-method-access & others - This mapping improves the tool's + // score + return 78; // Command Injection case 335: // java/predictable-seed - This mapping improves the tool's score return 330; // Weak Random