New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update pom.xml #1

Merged

cyates-checkmarx merged 1 commit into master from cyates-checkmarx-patch-1

Jun 23, 2023

Owner

cyates-checkmarx commented Jun 23, 2023

No description provided.


          Update pom.xml

1312c44

Owner Author

cyates-checkmarx commented Jun 23, 2023

Checkmarx One – Scan Summary & Details – 7bd1b390-6fb2-463b-8e47-7a4cd084a4a4

No New Or Fixed Issues Found

cyates-checkmarx merged commit 7697e66 into master

cyates-checkmarx deleted the cyates-checkmarx-patch-1 branch

June 29, 2023 20:03

This was referenced Jun 23, 2023

Reflected_XSS_All_Clients @ /src/main/webapp/login.jsp #118

Open

Stored_XSS @ /src/main/webapp/vulnerability/UserDetails.jsp #155

Open

Missing User Instruction @ /Dockerfile #16

Open

XPath_Injection @ /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java #178

Open

Reflected_XSS_All_Clients @ /src/main/java/org/cysecurity/cspf/jvl/controller/AddPage.java #109

Open

SQL_Injection @ /src/main/webapp/vulnerability/csrf/changepassword.jsp #126

Open

SQL_Injection @ /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java #121

Open

SQL_Injection @ /src/main/webapp/vulnerability/sqli/download_id.jsp #162

Open

Stored_XSS @ /src/main/webapp/myprofile.jsp #130

Open

Reflected_XSS_All_Clients @ /src/main/webapp/vulnerability/UserDetails.jsp #101

Open

Passwords And Secrets - Generic Password @ /cloudinfra/amq_1.tf #158

Open

Stored_XSS @ /src/main/webapp/vulnerability/sqli/download_id.jsp #145

Open

Reflected_XSS_All_Clients @ /src/main/webapp/vulnerability/xss/xss4.jsp #91

Open

S3 Bucket Access to Any Principal @ /cloudinfra/s3_1.tf #128

Open

SQL_Injection @ /src/main/webapp/admin/adminlogin.jsp #136

Open

Stored_XSS @ /src/main/webapp/vulnerability/securitymisconfig/pages.jsp #23

Open

SQL_Injection @ /src/main/webapp/vulnerability/UserDetails.jsp #43

Open

Stored_XSS @ /src/main/webapp/vulnerability/DisplayMessage.jsp #100

Open

Deserialization_of_Untrusted_Data @ /src/main/sca/TestDeserialize.java #139

Open

SQL_Injection @ /src/main/webapp/vulnerability/sqli/download_id_union.jsp #57

Open

Stored_XSS @ /src/main/webapp/vulnerability/Injection/orm.jsp #164

Open

Reflected_XSS_All_Clients @ /src/main/webapp/admin/adminlogin.jsp #58

Open

Stored_XSS @ /src/main/webapp/vulnerability/forum.jsp #92

Open

SQL_Injection @ /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java #20

Open

S3 Bucket SSE Disabled @ /cloudinfra/s3_1.tf #163

Open

SQL_Injection @ /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java #112

Open

This was referenced Jun 23, 2023

S3 Bucket Allows Get Action From All Principals @ /cloudinfra/s3_1.tf #62

Open

Passwords And Secrets - Generic Password @ /cloudinfra/rmq_2.tf #149

Open

SQL_Injection @ /src/main/webapp/changeCardDetails.jsp #116

Open

Connection_String_Injection @ /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java #108

Open

Second_Order_SQL_Injection @ /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java #172

Open

Reflected_XSS_All_Clients @ /src/main/java/org/cysecurity/cspf/jvl/controller/xxe.java #132

Open

Deserialization_of_Untrusted_Data @ /src/main/sca/VulnerableHTTPServer.java #110

Open

Stored_XSS @ /src/main/webapp/vulnerability/Messages.jsp #125

Open

SQL_Injection @ /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java #39

Open

SQL_Injection @ /src/main/webapp/vulnerability/forumposts.jsp #60

Open

Apt Get Install Pin Version Not Defined @ /Dockerfile #210

Open

S3 Bucket Without Versioning @ /cloudinfra/s3_1.tf #186

Open

SQS With SSE Disabled @ /cloudinfra/sqs_1.tf #199

Open

S3 Bucket Logging Disabled @ /cloudinfra/s3_2.tf #201

Open

MQ Broker Logging Disabled @ /cloudinfra/rmq_2.tf #226

Open

SQS With SSE Disabled @ /cloudinfra/sqs_2.tf #65

Open

S3 Bucket Logging Disabled @ /cloudinfra/s3_1.tf #215

Open

ElastiCache Redis Cluster Without Backup @ /cloudinfra/el_ache_1.tf #189

Open

Image Version Not Explicit @ /Dockerfile #230

Open

MQ Broker Logging Disabled @ /cloudinfra/rmq_1.tf #217

Open

AmazonMQ Broker Encryption Disabled @ /cloudinfra/amq_2.tf #219

Open

ALB Not Dropping Invalid Headers @ /cloudinfra/s3_2.tf #231

Open

AmazonMQ Broker Encryption Disabled @ /cloudinfra/rmq_1.tf #67

Open

ElastiCache Redis Cluster Without Backup @ /cloudinfra/el_ache_2.tf #232

Open

MQ Broker Logging Disabled @ /cloudinfra/amq_2.tf #222

Open

S3 Bucket Policy Accepts HTTP Requests @ /cloudinfra/s3_1.tf #196

Open

S3 Bucket Without Versioning @ /cloudinfra/s3_2.tf #234

Open

AmazonMQ Broker Encryption Disabled @ /cloudinfra/amq_1.tf #235

Open

AmazonMQ Broker Encryption Disabled @ /cloudinfra/rmq_2.tf #206

Open

MQ Broker Logging Disabled @ /cloudinfra/amq_1.tf #207

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet