Skip to content

Issues: AaronZhouYu/TotallySecureApp

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

3,008 Open 212 Closed
3,008 Open 212 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Improper_Resource_Shutdown_or_Release @ /src/main/webapp/eb/v1/dfi/includable.jsp branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3220 opened Aug 8, 2023 by AaronZhouYu
Integer_Underflow @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/UnrestrictedExtensionUploadController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3219 opened Aug 8, 2023 by AaronZhouYu
Use_Of_Hardcoded_Password @ /src/main/java/org/t246osslab/easybuggy4sb/Config.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3218 opened Aug 8, 2023 by AaronZhouYu
Client_Hardcoded_Domain @ /src/main/webapp/eb/v1/dfi/style_google_mdl.html branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3217 opened Aug 8, 2023 by AaronZhouYu
Root Container Not Mounted Read-only @ /deploy/k8s/base/mailhog/deployment.yaml branch:main Checkmarx CxKICS
#3216 opened Aug 8, 2023 by AaronZhouYu
Root Container Not Mounted Read-only @ /deploy/k8s/base/web/deployment.yaml branch:main Checkmarx CxKICS
#3215 opened Aug 8, 2023 by AaronZhouYu
Unsynchronized_Access_To_Shared_Data @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/SessionFixationController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3214 opened Aug 8, 2023 by AaronZhouYu
TruffleHog_HighEntropy_Strings @ /src/main/resources/application.properties branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3213 opened Aug 8, 2023 by AaronZhouYu
Improper_Resource_Access_Authorization @ /src/main/java/org/t246osslab/easybuggy4sb/controller/CxController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3212 opened Aug 8, 2023 by AaronZhouYu
No Drop Capabilities for Containers @ /deploy/k8s/base/community/deployment.yaml branch:main Checkmarx CxKICS
#3211 opened Aug 8, 2023 by AaronZhouYu
Spring_Overly_Permissive_Cross_Origin_Resource_Sharing_Policy @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/UnintendedFileDisclosureController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3210 opened Aug 8, 2023 by AaronZhouYu
Escape_False @ /src/main/webapp/eb/v1/dfi/includable.jsp branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3209 opened Aug 8, 2023 by AaronZhouYu
Spring_Overly_Permissive_Cross_Origin_Resource_Sharing_Policy @ /src/main/java/org/t246osslab/easybuggy4sb/controller/PingController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3208 opened Aug 8, 2023 by AaronZhouYu
Unsynchronized_Access_To_Shared_Data @ /src/main/java/org/t246osslab/easybuggy4sb/controller/DefaultLoginController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3207 opened Aug 8, 2023 by AaronZhouYu
Information_Exposure_Through_Query_String @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/CSRFController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3206 opened Aug 8, 2023 by AaronZhouYu
Spring_Overly_Permissive_Cross_Origin_Resource_Sharing_Policy @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/SessionFixationController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3205 opened Aug 8, 2023 by AaronZhouYu
Spring_Overly_Permissive_Cross_Origin_Resource_Sharing_Policy @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/SQLInjectionController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3204 opened Aug 8, 2023 by AaronZhouYu
Root Container Not Mounted Read-only @ /deploy/k8s/base/identity/deployment.yaml branch:main Checkmarx CxKICS
#3203 opened Aug 8, 2023 by AaronZhouYu
Unsynchronized_Access_To_Shared_Data @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/VerboseErrorMessageController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3202 opened Aug 8, 2023 by AaronZhouYu
Cleansing_Canonicalization_and_Comparison_Errors @ /src/main/java/org/t246osslab/easybuggy4sb/core/filters/AuthenticationFilter.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3201 opened Aug 8, 2023 by AaronZhouYu
CVE-2020-2933 @ Maven-mysql:mysql-connector-java-5.1.26 branch:main Checkmarx CxSCA
#3200 opened Aug 8, 2023 by AaronZhouYu
Blind_SQL_Injections @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/SQLInjectionController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3199 opened Aug 8, 2023 by AaronZhouYu
Client_Hardcoded_Domain @ /src/main/resources/templates/eb/v1/head.html branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3198 opened Aug 8, 2023 by AaronZhouYu
Spring_Overly_Permissive_Cross_Origin_Resource_Sharing_Policy @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/VulnerableOIDCRPController.java branch:main Checkmarx project:AaronZhouYu/TotallySecureApp SAST
#3197 opened Aug 8, 2023 by AaronZhouYu
No Drop Capabilities for Containers @ /deploy/k8s/base/mailhog/deployment.yaml branch:main Checkmarx CxKICS
#3196 opened Aug 8, 2023 by AaronZhouYu
ProTip! no:milestone will show everything without a milestone.