Skip to content

Update cx.yml#1

Open
cx-sean-carroll wants to merge 33 commits intomasterfrom
CxSeanC-patch-1
Open

Update cx.yml#1
cx-sean-carroll wants to merge 33 commits intomasterfrom
CxSeanC-patch-1

Conversation

@cx-sean-carroll
Copy link

@cx-sean-carroll cx-sean-carroll commented Mar 30, 2023

No description provided.

@cx-sean-carroll
Set up CI with Azure Pipelines
4fdb80a 
[skip ci]
@cx-sean-carroll
Update azure-pipelines.yml for Azure Pipelines
2587811
@cx-sean-carroll
Update azure-pipelines.yml for Azure Pipelines
7f19f79
@cx-sean-carroll
Update azure-pipelines.yml for Azure Pipelines
9192d3d
@cx-sean-carroll
Update azure-pipelines.yml for Azure Pipelines
50f7a7a
@cx-sean-carroll
Create test.txt
d9a2e71
@cx-sean-carroll
Update test.txt
e78ad7d
@cx-sean-carroll
Update test.txt
8f4f6d9
@cx-sean-carroll
Update test.txt
2bdc210
@cx-sean-carroll
Update test.txt
2dd0a0b
@cx-sean-carroll
Update test.txt
906b993
@cx-sean-carroll
Update test.txt
9096d08
@cx-sean-carroll
Update test.txt
27e130d
@cx-sean-carroll
Update test.txt
139bdb8
@cx-sean-carroll
Update test.txt
0fe853d
@cx-sean-carroll
Update test.txt
b5baca5
@cx-sean-carroll
Update test.txt
8775478
@cx-sean-carroll
Update test.txt
73cd392
@cx-sean-carroll
Update test.txt
8c83925
@cx-sean-carroll
Update test.txt
f8fb53b
@cx-sean-carroll
Update and rename test.txt to testtest.txt
f7ac012
@cx-sean-carroll
Update testtest.txt
cf821c9
@cx-sean-carroll
Update testtest.txt
0933244
@cx-sean-carroll
Update testtest.txt
937670e
@cx-sean-carroll
Update testtest.txt
05aa3d4
@cx-sean-carroll
Update testtest.txt
85ef587
@cx-sean-carroll
Update testtest.txt
17e4b2b
@cx-sean-carroll
Update testtest.txt
e811394
@cx-sean-carroll
Update testtest.txt
f743973
@cx-sean-carroll
Update testtest.txt
dbbc271
@cx-sean-carroll
Copy link
Author

cx-sean-carroll commented Mar 31, 2023

Logo
Checkmarx One – Scan Summary & Details – be7db1bf-9bf3-445e-a164-0d74d9c01bc7

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2015-4852 Maven-commons-collections:commons-collections-3.2.1 Vulnerable Package
HIGH CVE-2015-7501 Maven-commons-collections:commons-collections-3.2.1 Vulnerable Package
HIGH CVE-2022-4492 Maven-io.undertow:undertow-core-2.0.9.Final Vulnerable Package
HIGH CVE-2022-45688 Maven-org.json:json-20131018 Vulnerable Package
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/ForgotPassword.jsp: 42 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java: 36 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java: 36 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java: 36 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java: 36 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java: 36 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java: 36 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/admin/adminlogin.jsp: 12 Attack Vector
HIGH Side_Channel_Data_Leakage /src/main/webapp/login.jsp: 15 Attack Vector
MEDIUM RDS With Backup Disabled /rds.tf: 1 Make sure the AWS RDS configuration has automatic backup configured. If the retention period is equal to 0 there is no backup
MEDIUM Stored_Relative_Path_Traversal /src/main/webapp/vulnerability/sqli/download_id_union.jsp: 24 Attack Vector
MEDIUM Stored_Relative_Path_Traversal /src/main/webapp/vulnerability/sqli/download_id.jsp: 24 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java: 36 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java: 35 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/sqs.java: 25 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/csrf/changepassword.jsp: 33 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 60 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 58 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/changeCardDetails.jsp: 39 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/changeCardDetails.jsp: 38 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/changeCardDetails.jsp: 37 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/idor/change-email.jsp: 27 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/csrf/change-info.jsp: 26 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/sqli/download_id_union.jsp: 18 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/sqli/download_id.jsp: 18 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/myprofile.jsp: 16 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/myprofile.jsp: 16 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/UserDetails.jsp: 8 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/forum.jsp: 43 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/forum.jsp: 42 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/forum.jsp: 41 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/idor/change-email.jsp: 28 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/admin/manageusers.jsp: 13 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/admin/adminlogin.jsp: 11 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/forumposts.jsp: 9 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/ForgotPassword.jsp: 42 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/ForgotPassword.jsp: 42 Attack Vector
LOW Blind_SQL_Injections /src/main/webapp/vulnerability/DisplayMessage.jsp: 16 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 47 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 44 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/EmailCheck.java: 44 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/LoginValidator.java: 43 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/UsernameCheck.java: 43 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 46 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 45 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 44 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 43 Attack Vector
LOW Blind_SQL_Injections /src/main/java/org/cysecurity/cspf/jvl/controller/Register.java: 43 Attack Vector
LOW Heap_Inspection /src/main/webapp/vulnerability/Injection/orm.jsp: 31 Attack Vector
LOW Heap_Inspection /src/main/webapp/vulnerability/csrf/changepassword.jsp: 34 Attack Vector
LOW Heap_Inspection /src/main/java/org/cysecurity/cspf/jvl/model/DBConnect.java: 28 Attack Vector
LOW Heap_Inspection /src/main/java/org/cysecurity/cspf/jvl/controller/Install.java: 33 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/idor/download.jsp: 22 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/securitymisconfig/pages.jsp: 10 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/sqli/download_id.jsp: 41 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/admin/manageusers.jsp: 9 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/ForgotPassword.jsp: 39 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/DisplayMessage.jsp: 9 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/sqli/download_id.jsp: 21 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/admin/adminlogin.jsp: 10 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/csrf/change-info.jsp: 24 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/sqli/download_id_union.jsp: 21 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/admin/Configure.jsp: 22 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/myprofile.jsp: 14 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/UserDetails.jsp: 7 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/csrf/changepassword.jsp: 28 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/forumposts.jsp: 7 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/baasm/SiteTitle.jsp: 33 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/forum.jsp: 21 Attack Vector
LOW Improper_Resource_Shutdown_or_Release /src/main/webapp/vulnerability/forumUsersList.jsp: 7

More results are available on AST platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cx-sean-carroll