Remediate OWASP A05:2025 Injection
Recipe ID
org.openrewrite.java.security.Owasp2025A05Artifact
org.openrewrite.recipe:rewrite-java-securityOWASP A05:2025 describes failures related to user-supplied data being used to influence program state to operate outside of its intended bounds. Previously A03:2021.
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.java.security.Owasp2025A05If the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.36.0Definition
This recipe runs the following recipes in order.
- Remediate OWASP A03:2021 Injection
org.openrewrite.java.security.OwaspA03 - XML parser XXE vulnerability
org.openrewrite.java.security.XmlParserXXEVulnerability - Remediate server-side request forgery (SSRF)
org.openrewrite.java.security.FixCwe918 - Find OS command injection vectors
org.openrewrite.java.security.search.FindCommandInjection - Find potential SQL injection
org.openrewrite.java.security.search.FindSqlInjection - Find script engine code injection vectors
org.openrewrite.java.security.search.FindScriptEngineInjection - Find resource injection vectors
org.openrewrite.java.security.search.FindResourceInjection - Find XPath injection vectors
org.openrewrite.java.security.search.FindXPathInjection - Find Expression Language injection vectors
org.openrewrite.java.security.search.FindExpressionLanguageInjection - Find HTTP response splitting vectors
org.openrewrite.java.security.search.FindHttpResponseSplitting - Find XSS vulnerabilities
org.openrewrite.analysis.java.security.FindXssVulnerability - Find LDAP injection vulnerabilities
org.openrewrite.analysis.java.security.FindLdapInjection - Find improper validation of array index
org.openrewrite.analysis.java.security.FindArrayIndexInjection
Data tables
Structured output this recipe can produce.
- Method callsThe text of matching method invocations.
org.openrewrite.java.table.MethodCalls - Taint flowRecords taint flows from sources to sinks with their taint types.
org.openrewrite.analysis.java.taint.table.TaintFlowTable - Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats