search

Custodela / Riches

0 stars 3 forks source link

CX CGI_Reflected_XSS_All_Clients @ riches/WEB-INF/src/java/com/checkmarx/samples/riches/legacy/mail/SendMail.java [master] #106

Closed kmcdon83 closed 5 years ago

kmcdon83 commented 5 years ago

CGI_Reflected_XSS_All_Clients issue exists @ riches/WEB-INF/src/java/com/checkmarx/samples/riches/legacy/mail/SendMail.java in branch master

Unvalidated input was found in line number 37 in riches\WEB-INF\src\java\com\checkmarx\samples\riches\legacy\mail\SendMail.java file. A possible XSS exploitation was found in println at line number 37.

Severity: Medium CWE:79 Vulnerability details and guidance Internal Guidance Lines: 37

Code (Line #37):

    public static void main(String args[])
kmcdon83 commented 5 years ago

Issue still exists.