ZAP Full Scan Report

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:3000/latest/meta-data/
  • SQL Injection - SQLite [40024] total: 8:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • ..
  • Timestamp Disclosure - Unix [10096] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/assets/application-3b93815e6c33af9c066ac8f1803b1aa8c3f62ad71367cfbce8f74df0a6250bf9.js
    • http://localhost:3000/assets/application-3b93815e6c33af9c066ac8f1803b1aa8c3f62ad71367cfbce8f74df0a6250bf9.js
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • http://localhost:3000/assets/application-3b93815e6c33af9c066ac8f1803b1aa8c3f62ad71367cfbce8f74df0a6250bf9.js
  • Loosely Scoped Cookie [90033] total: 12:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • ..
  • User Agent Fuzzer [10104] total: 56:
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • http://localhost:3000
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 33:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • ..

View the following link to download the report. RunnerID:1794842871

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts

  • CSP: Notices [10055] total: 1:

    • http://localhost:3000/sitemap.xml

    Resolved Alerts

  • SQL Injection - SQLite [40024] total: 8:

View the following link to download the report. RunnerID:1799343881

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • SQL Injection - SQLite [40024] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/

View the following link to download the report. RunnerID:1806331686

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - SQLite [40024] total: 3:

View the following link to download the report. RunnerID:1812164177

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • SQL Injection - SQLite [40024] total: 1:
    • http://localhost:3000/

View the following link to download the report. RunnerID:1817945285

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - SQLite [40024] total: 1:

View the following link to download the report. RunnerID:1823672511

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:1840951254

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/sitemap.xml

View the following link to download the report. RunnerID:1846856281

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:1876073973

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/sitemap.xml

View the following link to download the report. RunnerID:1881485724

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:1941119117

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/sitemap.xml

View the following link to download the report. RunnerID:1945357593

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:1951335726

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/sitemap.xml

View the following link to download the report. RunnerID:1963015684

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:1973223712

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/sitemap.xml

View the following link to download the report. RunnerID:1976298309

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:1980473879

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Format String Error [30002] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
  • Hidden File Found [40035] total: 1:
    • http://localhost:3000/CHANGELOG.txt
  • Integer Overflow Error [30003] total: 10:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/
    • ..
  • XSLT Injection [90017] total: 1:
    • http://localhost:3000/logout
  • CSP: Notices [10055] total: 1:
    • http://localhost:3000/sitemap.xml

View the following link to download the report. RunnerID:1986584884

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Format String Error [30002] total: 4:
  • Integer Overflow Error [30003] total: 10:

View the following link to download the report. RunnerID:2004044108

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Hidden File Found [40035] total: 1:

View the following link to download the report. RunnerID:2022261314

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • PII Disclosure [10062] total: 1:
    • http://localhost:3000/

View the following link to download the report. RunnerID:2269710181

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:2275623280

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Cloud Metadata Potentially Exposed [90034] total: 1:

View the following link to download the report. RunnerID:2535354239

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • PII Disclosure [10062] total: 1:
    • http://localhost:3000/

View the following link to download the report. RunnerID:2732132347

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:2739315574

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Remote OS Command Injection [90020] total: 1:
    • http://localhost:3000/

View the following link to download the report. RunnerID:2765729557

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Remote OS Command Injection [90020] total: 1:

View the following link to download the report. RunnerID:2769390964

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • Timestamp Disclosure - Unix [10096] total: 8:

View the following link to download the report. RunnerID:3044892318

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Permissions Policy Header Not Set [10063] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/assets/application-4a4bb89d2654d9b1ffd24ca1464e1699c42f3e3cf32b8778366b4aa867fe6cd9.js
    • http://localhost:3000/
  • Non-Storable Content [10049] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/sitemap.xml
    • http://localhost:3000/logout
  • Storable and Cacheable Content [10049] total: 9:
    • http://localhost:3000/assets/application-4a4bb89d2654d9b1ffd24ca1464e1699c42f3e3cf32b8778366b4aa867fe6cd9.js
    • http://localhost:3000/assets/application-d385c9e6ca8fc526c7a32b2cfd22c4c362d54f02bc5effa6aaa6d3611b677fd6.css
    • http://localhost:3000/assets/uswds/dist/img/icon-dot-gov-769bd5f6cbe7cf48452e9e46c126bc1390b26ee14740883d80fe956e7dbfae3c.svg
    • http://localhost:3000/assets/uswds/dist/img/icon-https-c9eb76304db98232bf59e2f0937e2125d228bfb3f3fdd9130800ad93ba376dfb.svg
    • http://localhost:3000/assets/uswds/dist/img/us_flag_small-9c507b1ff21f65c4b8f0c45d0e0d0a10bb5c9864c1a76e07aa3293da574968a1.png
    • ..

View the following link to download the report. RunnerID:3264945436

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • Modern Web Application [10109] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/

View the following link to download the report. RunnerID:3470247136

[github-actions[bot]]

• Site: http://localhost:3000 New Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
    • http://localhost:3000/
    • http://localhost:3000/
  • Server Side Template Injection (Blind) [90036] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/
    • http://localhost:3000/

View the following link to download the report. RunnerID:3601498823

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3608410268

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3613140325

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3619813598

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:

View the following link to download the report. RunnerID:3629315388

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3638675869

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3648065648

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3657159740

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3664088224

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3668849839

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3675549574

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3685186491

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3694590264

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3703888774

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3712902582

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3719913684

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3724710707

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:

View the following link to download the report. RunnerID:3731196030

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:
  • XSLT Injection [90017] total: 1:
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:3740282691

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:
  • XSLT Injection [90017] total: 1:
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:3749086827

[github-actions[bot]]

• Site: http://localhost:3000 Resolved Alerts
  • SQL Injection - PostgreSQL - Time Based [40022] total: 2:
  • Server Side Template Injection (Blind) [90036] total: 3:
  • XSLT Injection [90017] total: 1:
  • CSP: Notices [10055] total: 1:

View the following link to download the report. RunnerID:3757569852