# Format String Error

**URL:** <https://community.grafana.com/t/format-string-error/36451>\
**Category:** Grafana\
**Created:** [September 11, 2020, 7:25am UTC](https://community.grafana.com/t/format-string-error/36451 "2020-09-11T07:25:25Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![abhimanyumanocha](https://avatars.discourse-cdn.com/v4/letter/a/58956e/32.png) [@abhimanyumanocha](https://community.grafana.com/u/abhimanyumanocha)\
**Post date:** [September 11, 2020, 7:25am UTC](https://community.grafana.com/t/format-string-error/36451/1 "2020-09-11T07:25:25Z")

</div>

I have run Zap scanning tool on my Grafana Project. we are using grafana 6.7.3 version.  
Zap has reported **Format String Error** alert of medium severity. Below is detail of Alert -

| Medium (Medium) | Format String Error |
| --- | --- |
| Description | A Format String error occurs when the submitted data of an input string is evaluated as a command by the application. |
| | |
| URL | http://\< **IpAddress** \>/api/admin/users |
| Method | POST |
| Parameter | password |
| Attack | ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s |

Could you please let me know the resolution for the same.

Regards,  
Abhimanyu