Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in BruteForceServlet.java:33

[joshn-whitesource-app]

Code Security Finding

This finding was first detected on 2024-02-16 01:29pm GMT and is still present in the last scan performed on 2024-02-16 01:58pm GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
Medium	Trust Boundary Violation	CWE-501	BruteForceServlet.java:33	1
Vulnerable Code easybuggy4/src/main/java/org/t246osslab/easybuggy/vulnerabilities/BruteForceServlet.java Lines 28 to 33 in f83166e String password = req.getParameter("password"); HttpSession session = req.getSession(true); if (authUser(userid, password)) { session.setAttribute("authNMsg", "authenticated"); session.setAttribute("userid", userid); 1 Data Flow/s detected 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk