ZAP Scan Baseline Report

[github-actions[bot]]

• Site: http://localhost:8080 New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 5:
    • http://localhost:8080
    • http://localhost:8080/api/v2/oa3/swagger-ui/
    • http://localhost:8080/login?next=/
    • http://localhost:8080/login?next=/robots.txt
    • http://localhost:8080/login?next=/sitemap.xml
  • Vulnerable JS Library [10003] total: 1:
    • http://localhost:8080/static/bootstrap/dist/js/bootstrap.min.js
  • Application Error Disclosure [90022] total: 4:
    • http://localhost:8080
    • http://localhost:8080/login?next=/
    • http://localhost:8080/login?next=/robots.txt
    • http://localhost:8080/login?next=/sitemap.xml
  • Dangerous JS Functions [10110] total: 3:
    • http://localhost:8080/static/drf_spectacular_sidecar/swagger-ui-dist/swagger-ui-bundle.js
    • http://localhost:8080/static/jquery/dist/jquery.js
    • http://localhost:8080/static/pdfmake/build/pdfmake.min.js
  • Information Disclosure - Debug Error Messages [10023] total: 4:
    • http://localhost:8080
    • http://localhost:8080/login?next=/
    • http://localhost:8080/login?next=/robots.txt
    • http://localhost:8080/login?next=/sitemap.xml
  • Permissions Policy Header Not Set [10063] total: 12:
    • http://localhost:8080
    • http://localhost:8080/login?next=/
    • http://localhost:8080/login?next=/sitemap.xml
    • http://localhost:8080/static/bootstrap-select/dist/js/bootstrap-select.min.js
    • http://localhost:8080/static/bootstrap/dist/js/bootstrap.min.js
    • ..
  • Timestamp Disclosure - Unix [10096] total: 37:
    • http://localhost:8080/static/drf_spectacular_sidecar/swagger-ui-dist/swagger-ui-standalone-preset.js
    • http://localhost:8080/static/drf_spectacular_sidecar/swagger-ui-dist/swagger-ui-standalone-preset.js
    • http://localhost:8080/static/drf_spectacular_sidecar/swagger-ui-dist/swagger-ui-standalone-preset.js
    • http://localhost:8080/static/drf_spectacular_sidecar/swagger-ui-dist/swagger-ui-standalone-preset.js
    • http://localhost:8080/static/drf_spectacular_sidecar/swagger-ui-dist/swagger-ui-standalone-preset.js
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • http://localhost:8080/static/bootstrap-select/dist/css/bootstrap-select.min.css
    • http://localhost:8080/static/bootstrap/dist/css/bootstrap.min.css
    • http://localhost:8080/static/chosen-bootstrap/chosen.bootstrap.min.css
    • http://localhost:8080/static/datatables.net-buttons-bs/css/buttons.bootstrap.min.css
    • http://localhost:8080/static/datatables.net-dt/css/jquery.dataTables.min.css
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 12:
    • http://localhost:8080
    • http://localhost:8080
    • http://localhost:8080/login?next=/
    • http://localhost:8080/login?next=/
    • http://localhost:8080/login?next=/sitemap.xml
    • ..
  • Loosely Scoped Cookie [90033] total: 1:
    • http://localhost:8080/api/v2/oa3/swagger-ui/
  • Modern Web Application [10109] total: 5:
    • http://localhost:8080
    • http://localhost:8080/api/v2/oa3/swagger-ui/
    • http://localhost:8080/login?next=/
    • http://localhost:8080/login?next=/robots.txt
    • http://localhost:8080/login?next=/sitemap.xml
  • Non-Storable Content [10049] total: 7:
    • http://localhost:8080
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/login?next=/
    • http://localhost:8080/login?next=/sitemap.xml
    • ..
  • Session Management Response Identified [10112] total: 1:
    • http://localhost:8080/api/v2/oa3/swagger-ui/
  • Storable and Cacheable Content [10049] total: 5:
    • http://localhost:8080/static/bootstrap-select/dist/css/bootstrap-select.min.css
    • http://localhost:8080/static/chosen-bootstrap/chosen.bootstrap.min.css
    • http://localhost:8080/static/fontawesomefree/css/solid.css
    • http://localhost:8080/static/metismenu/dist/metisMenu.min.css
    • http://localhost:8080/static/startbootstrap-sb-admin-2/dist/css/sb-admin-2.css

View the following link to download the report. RunnerID:10654315323

---

ZAP is supported by the Crash Override Open Source Fellowship

[github-actions[bot]]

• Site: http://localhost:8080 Resolved Alerts
  • Dangerous JS Functions [10110] total: 3:

View the following link to download the report. RunnerID:10776630447