ZAP Full Scan Report - Githubissues

GSA-TTS / all_sorns

Repo for SORN DASH

https://all-sorns.app.cloud.gov

Other

5 stars 8 forks source link

ZAP Full Scan Report #280

Closed github-actions[bot] closed 1 month ago

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Proxy Disclosure [40025] total: 20:
- Modern Web Application [10109] total: 6:
- Backup File Disclosure [10095] total: 18:
- Cookie Slack Detector [90027] total: 20:
- User Agent Fuzzer [10104] total: 20:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- CSP: Wildcard Directive [10055] total: 5:
- Incomplete or No Cache-control Header Set [10015] total: 5:
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Absence of Anti-CSRF Tokens [10202] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://all-sorns.app.cloud.gov/packs/js/beforeSearch-ad3e4062370299fc08ef.js
  - https://all-sorns.app.cloud.gov/packs/js/application-a93408afa07507404cac.js
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://all-sorns.app.cloud.gov/search?agencies%5B%5D=Administration+For+Children+And+Families&ending_year=ZAP&fields%5B%5D=agency_names&search&starting_year=ZAP

View the following link to download the report. RunnerID:1291972704

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2252098946

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://all-sorns.app.cloud.gov/assets/uswds-2.9.0/us_flag_small-9c507b1ff21f65c4b8f0c45d0e0d0a10bb5c9864c1a76e07aa3293da574968a1.png
  - https://all-sorns.app.cloud.gov/sitemap.xml
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255710072

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://all-sorns.app.cloud.gov/assets/PrvOps_SornDash_About_01-9fccdca60886939598e557190a36f04e436d8691364e9f39b818188cfe5d6655.svg
  - https://all-sorns.app.cloud.gov/assets/uswds-2.9.0/icon-https-c9eb76304db98232bf59e2f0937e2125d228bfb3f3fdd9130800ad93ba376dfb.svg
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255719766

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://all-sorns.app.cloud.gov/
  - https://all-sorns.app.cloud.gov/packs/js/application-a93408afa07507404cac.js
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255740540

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://all-sorns.app.cloud.gov/assets/gsa-logo-w100-0af539616754a760edcb381c8807c81b4409039afb499b222d2c953cb3806913.png
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255749226

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255793117

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255813612

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://all-sorns.app.cloud.gov/
  - https://all-sorns.app.cloud.gov/packs/js/beforeSearch-ad3e4062370299fc08ef.js
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255828192

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://all-sorns.app.cloud.gov
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255859620

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2255881228

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://all-sorns.app.cloud.gov/packs/js/application-eafc0559af8e7bd9d377.js
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2258950820

github-actions[bot] commented 2 years ago

Site: https://all-sorns.app.cloud.gov New Alerts
- Anti-CSRF Tokens Check [20012] total: 2:
  - https://all-sorns.app.cloud.gov
  - https://all-sorns.app.cloud.gov/
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://all-sorns.app.cloud.gov/packs/js/beforeSearch-bcf76adfdf6994abdb75.js
  Resolved Alerts
- Backup File Disclosure [10095] total: 9:

View the following link to download the report. RunnerID:2259027266

Previous