ThunderScan Alert (Java_Demo) - Githubissues

Mend-Demo-GMS / Java-Demo

Apache License 2.0

0 stars 0 forks source link

ThunderScan Alert (Java_Demo) #19

Closed garymsegal-ws closed 2 years ago

garymsegal-ws commented 2 years ago

ThunderScan Results (Java_Demo): Found 112 vulnerabilities

Target Repository: https://github.com/WhiteSource-Demo-GMS/Java-Demo (Branch: main)

Languages: Java

Status: Scan finished Scan Duration: 00:00:19 Total Vulnerabilities: 112

Found vulnerability types:

Language: Java

(High Risk) SQL Injection: 3
(High Risk) Path/Directory Traversal: 10
(High Risk) Code Injection: 1
(High Risk) XML External Entity (XXE) Injection: 1
(Medium Risk) Cross-Site Scripting: 32
(Medium Risk) File Manipulation: 9
(Medium Risk) Unvalidated/Open Redirect: 17
(Medium Risk) HTTP Header Injection: 1
(Medium Risk) Session Poisoning: 5
(Low Risk) Log Forging: 6
(Low Risk) Trust Boundary Violation: 5
(Low Risk) Heap Inspection: 5
(Low Risk) Error Messages Information Exposure: 15
(Low Risk) Weak Pseudo-Random: 2

Scan URL: /#/scans/936c4b1a-a1a6-4b0b-8273-2bf044073a18/details API Scan URL: /api/scans/936c4b1a-a1a6-4b0b-8273-2bf044073a18