New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Non OAuth2 Security Requirement Defining OAuth2 Scopes @ /swagger-eb.json #6

Closed

AaronZhouYu opened this issue Feb 7, 2023 · 0 comments

Labels

branch:main Checkmarx CxKICS

Owner

AaronZhouYu commented Feb 7, 2023

Non OAuth2 Security Requirement Defining OAuth2 Scopes issue exists @ swagger-eb.json in branch main

If the security scheme is not of type 'oauth2', the array value must be empty

Namespace: AaronZhouYu
Repository: TotallySecureApp
Repository Url: https://github.com/AaronZhouYu/TotallySecureApp
CxAST-Project: AaronZhouYu/TotallySecureApp
CxAST platform scan: 044c3806-8e67-4c10-99a5-5e39d680a811
Branch: main
Application: TotallySecureApp
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT

AaronZhouYu closed this as completed

This was referenced Sep 18, 2023

Passwords And Secrets - Generic Password @ /deploy/docker/docker-compose.yml #28

Open

Security Opt Not Set @ /deploy/docker/docker-compose.yml #100

Open

Networks Not Set @ /deploy/docker/docker-compose.yml #247

Open

Host Namespace is Shared @ /deploy/docker/docker-compose.yml #187

Open

TruffleHog_HighEntropy_Strings @ /src/main/resources/templates/eb/v1/head.html #3139

Open

Spring_Overly_Permissive_Cross_Origin_Resource_Sharing_Policy @ /src/main/java/org/t246osslab/easybuggy4sb/controller/CxController.java #3122

Open

Unsafe_Use_Of_Target_blank @ /src/main/resources/templates/eb/v1/index.html #2867

Open

Escape_False @ /src/main/webapp/eb/v1/dt/includable.jsp #3151

Open

Unsynchronized_Access_To_Shared_Data @ /src/main/java/org/t246osslab/easybuggy4sb/vulnerabilities/VulnerableOIDCRPController.java #3162

Open

Container Capabilities Unrestricted @ /deploy/docker/docker-compose.yml #255

Open

Client_Hardcoded_Domain @ /src/main/resources/templates/eb/v1/head.html #3198

Open

Unsynchronized_Access_To_Shared_Data @ /src/main/java/org/t246osslab/easybuggy4sb/controller/DefaultLoginController.java #3207

Open

Escape_False @ /src/main/webapp/eb/v1/dfi/includable.jsp #3209

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment