Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Severity Level: Warning
Care must be taken when using the Invoke-Expression
command. The Invoke-Expression
executes the
specified string and returns the results.
Code injection into your application or script can occur if the expression passed as a string includes any data provided from the user.
Remove the use of Invoke-Expression
.
Invoke-Expression 'Get-Process'
Get-Process