search

Custodela / Riches

0 stars 3 forks source link

CX CGI_Stored_XSS @ riches/WEB-INF/src/java/com/checkmarx/samples/riches/webservices/BannerAdClient.java [master] #95

Closed kmcdon83 closed 5 years ago

kmcdon83 commented 5 years ago

CGI_Stored_XSS issue exists @ riches/WEB-INF/src/java/com/checkmarx/samples/riches/webservices/BannerAdClient.java in branch master

Unvalidated DB output was found in line number 18 in riches\WEB-INF\src\java\com\checkmarx\samples\riches\webservices\BannerAdClient.java file. A possible XSS exploitation was found in write at line number 18.

Severity: Medium CWE:79 Vulnerability details and guidance Internal Guidance Lines: 25

Code (Line #25):

        while ((len = in.read(buf)) > 0) {
kmcdon83 commented 5 years ago

Issue still exists.