Custodela / iGoat-Swift

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
https://igoatapp.com/
GNU General Public License v3.0
0 stars 0 forks source link

CX Allowed_Backup @ iGoat-Swift/iGoat-Swift/ThirdParty/CocoaLumberjack/DDFileLogger.m [master] #69

Open tsunez opened 4 years ago

tsunez commented 4 years ago

Allowed_Backup issue exists @ iGoat-Swift/iGoat-Swift/ThirdParty/CocoaLumberjack/DDFileLogger.m in branch master

The file created at filePath in iGoat-Swift\iGoat-Swift\ThirdParty\CocoaLumberjack\DDFileLogger.m at line 455 is not explicitly excluded from application back-up.

Severity: Low

CWE:530

Vulnerability details and guidance

Checkmarx

Recommended Fix

Lines: 496


Code (Line #496):

            [[NSFileManager defaultManager] createFileAtPath:filePath contents:nil attributes:attributes];

tsunez commented 4 years ago

Issue still exists.

SUMMARY

Issue has 1 vulnerability/vulnerabilities left to be fixed (Please scroll to the top for more information)

tsunez commented 4 years ago

Issue still exists.

SUMMARY

Issue has 1 vulnerability/vulnerabilities left to be fixed (Please scroll to the top for more information)