ZAP Scan Baseline Report - Githubissues

MalinOmegapoint / CTF

0 stars 1 forks source link

ZAP Scan Baseline Report #1

Open github-actions[bot] opened 1 day ago

github-actions[bot] commented 1 day ago

Site: https://example.com New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://example.com
- Permissions Policy Header Not Set [10063] total: 3:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 3:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- X-Content-Type-Options Header Missing [10021] total: 1:
  - https://example.com
- Re-examine Cache-control Directives [10015] total: 1:
  - https://example.com
- Retrieved from Cache [10050] total: 3:
- Storable and Cacheable Content [10049] total: 3:

View the following link to download the report. RunnerID:11151647337

ZAP is supported by the Crash Override Open Source Fellowship

github-actions[bot] commented 3 hours ago

Site: https://github.com New Alerts
- PII Disclosure [10062] total: 1:
  - https://github.com/features/security/software-supply-chain
- CSP: style-src unsafe-inline [10055] total: 10:
  - https://github.com/
  - https://github.com///branches
  - https://github.com///commits/
  - https://github.com///forks
  - https://github.com///issues/new
  - ..
- Source Code Disclosure - SQL [10099] total: 1:
  - https://github.com/enterprise/advanced-security
- Sub Resource Integrity Attribute Missing [90003] total: 79:
  - https://github.com/
  - https://github.com/
  - https://github.com/
  - https://github.com/
  - https://github.com/
  - ..
- Cookie No HttpOnly Flag [10010] total: 5:
  - https://github.com/
  - https://github.com/MalinOmegapoint
  - https://github.com/MalinOmegapoint/CTF1
  - https://github.com/robots.txt
  - https://github.com/sitemap.xml
- Cross-Domain JavaScript Source File Inclusion [10017] total: 123:
  - https://github.com/
  - https://github.com/
  - https://github.com/
  - https://github.com/
  - https://github.com/
  - ..
- Permissions Policy Header Not Set [10063] total: 10:
  - https://github.com/
  - https://github.com///branches
  - https://github.com///commits/
  - https://github.com///forks
  - https://github.com///issues/new
  - ..
- Strict-Transport-Security Header Not Set [10035] total: 3:
  - https://github.com/fluidicon.png
  - https://github.com/opensearch.xml
  - https://github.com/robots.txt
- Timestamp Disclosure - Unix [10096] total: 8:
  - https://github.com/
  - https://github.com/
  - https://github.com/MalinOmegapoint/CTF1
  - https://github.com/MalinOmegapoint/CTF1
  - https://github.com/MalinOmegapoint/CTF1
  - ..
- X-Content-Type-Options Header Missing [10021] total: 3:
  - https://github.com/fluidicon.png
  - https://github.com/opensearch.xml
  - https://github.com/robots.txt
- Authentication Request Identified [10111] total: 12:
  - https://github.com/session
  - https://github.com/session
  - https://github.com/session
  - https://github.com/session
  - https://github.com/session
  - ..
- Information Disclosure - Sensitive Information in URL [10024] total: 12:
  - https://github.com/login?passkey=true&return_to=https%3A%2F%2Fgithub.com%2F%2A%2F%2A%2Fbranches
  - https://github.com/login?passkey=true&return_to=https%3A%2F%2Fgithub.com%2F%2A%2F%2A%2Fcommits%2F
  - https://github.com/login?passkey=true&return_to=https%3A%2F%2Fgithub.com%2F%2A%2F%2A%2Fcontributors
  - https://github.com/login?passkey=true&return_to=https%3A%2F%2Fgithub.com%2F%2A%2F%2A%2Fforks
  - https://github.com/login?passkey=true&return_to=https%3A%2F%2Fgithub.com%2F%2A%2F%2A%2Fissues%2Fnew
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 11:
  - https://github.com/ekansa/Open-Context-Data
  - https://github.com/features/copilot
  - https://github.com/features/security
  - https://github.com/MalinOmegapoint/CTF1
  - https://github.com/resources/articles/devops
  - ..
- Modern Web Application [10109] total: 10:
  - https://github.com/
  - https://github.com///branches
  - https://github.com///commits/
  - https://github.com///forks
  - https://github.com///issues/new
  - ..
- Non-Storable Content [10049] total: 4:
  - https://github.com/
  - https://github.com/MalinOmegapoint
  - https://github.com/MalinOmegapoint/CTF1
  - https://github.com/sitemap.xml
- Re-examine Cache-control Directives [10015] total: 10:
  - https://github.com/
  - https://github.com/account-login
  - https://github.com/ekansa/Open-Context-Data
  - https://github.com/Explodingstuff/
  - https://github.com/features/actions
  - ..
- Session Management Response Identified [10112] total: 12:
  - https://github.com/
  - https://github.com/
  - https://github.com/MalinOmegapoint
  - https://github.com/MalinOmegapoint/CTF1
  - https://github.com/MalinOmegapoint/CTF1
  - ..
- Storable and Cacheable Content [10049] total: 1:
  - https://github.com/robots.txt
- Storable but Non-Cacheable Content [10049] total: 5:
  - https://github.com///forks
  - https://github.com///issues/new
  - https://github.com///issues/search
  - https://github.com///projects
  - https://github.com///pulse
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 11:
  - https://github.com/customer-stories?type=enterprise
  - https://github.com/customer-stories?type=enterprise
  - https://github.com/customer-stories?type=enterprise
  - https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FMalinOmegapoint
  - https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FMalinOmegapoint
  - ..

View the following link to download the report. RunnerID:11183551932