SecOps #559: [Sécurité] Vulnérabilité de code : cron-service.js:1984 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring) - GetYourJob - Redmine

Custom queries

Issues assigned to me
Reported issues
Updated issues
Watched issues

Actions

SecOps #559

open

[Sécurité] Vulnérabilité de code : cron-service.js:1984 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring)

SecOps #559: [Sécurité] Vulnérabilité de code : cron-service.js:1984 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring)

Added by Client Dashboard about 2 months ago. Updated about 1 month ago.

Status:

Submitted

Priority:

Normal

Assignee:

Start date:

06/15/2026

Due date:

% Done:

Estimated time:

spec_ref:

build_status:

build_number:

ci_run_url:

scan_status:

scan_report_url:

deploy_status:

preprod_url:

deployed_at:

branch:

pr_url:

security_key:

cron-service.js:1984_javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring

severity:

low

paused:

Description

**Sévérité** : LOW
**Source** : Semgrep
`vuln-low`
**Emplacement** : cron-service.js:1984
**Règle** : javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring

Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.

### Extrait de code
```
requires login
```

### Lien CVE
https://cwe.mitre.org/data/definitions/134.html

History
Notes