OWASP Scan - Master Data Management

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov New Alerts
  • Proxy Disclosure [40025] total: 18:
    • https://easey-dev.app.cloud.gov/robots.txt
    • https://easey-dev.app.cloud.gov/api/facility-mgmt
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
    • https://easey-dev.app.cloud.gov/static/js/main.chunk.js
    • https://easey-dev.app.cloud.gov/logo192.png
    • ..
  • Timestamp Disclosure - Unix [10096] total: 20:
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • ..
  • Cross-Domain Misconfiguration [10098] total: 4:
    • https://easey-dev.app.cloud.gov/api/facility-mgmt
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER
    • https://easey-dev.app.cloud.gov/api/monitor-plan-mgmt
  • Feature Policy Header Not Set [10063] total: 6:
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
    • https://easey-dev.app.cloud.gov/static/js/main.chunk.js
    • https://easey-dev.app.cloud.gov/
    • https://easey-dev.app.cloud.gov/static/js/bundle.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • ..
  • .env Information Leak [40034] total: 1:
    • https://easey-dev.app.cloud.gov/.env
  • Information Disclosure - Suspicious Comments [10027] total: 20:
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/main.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • ..
  • Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 4:
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
    • https://easey-dev.app.cloud.gov/robots.txt
    • https://easey-dev.app.cloud.gov/manifest.json
    • https://easey-dev.app.cloud.gov/
  • Storable and Cacheable Content [10049] total: 8:
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
    • https://easey-dev.app.cloud.gov/static/js/main.chunk.js
    • https://easey-dev.app.cloud.gov/api/facility-mgmt
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/sitemap.xml
    • ..
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 12:
    • https://easey-dev.app.cloud.gov/logo192.png
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
    • https://easey-dev.app.cloud.gov/static/js/main.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER
    • ..
  • Base64 Disclosure [10094] total: 7:
    • https://easey-dev.app.cloud.gov/static/js/bundle.js
    • https://easey-dev.app.cloud.gov/
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/api/facility-mgmt
    • ..
  • User Agent Fuzzer [10104] total: 7:
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER
    • ..
  • CSP: Wildcard Directive [10055] total: 2:
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER
    • https://easey-dev.app.cloud.gov/sitemap.xml
  • Apache Range Header DoS (CVE-2011-3192) [10053] total: 4:
    • https://easey-dev.app.cloud.gov/manifest.json
    • https://easey-dev.app.cloud.gov/favicon.ico
    • https://easey-dev.app.cloud.gov/robots.txt
    • https://easey-dev.app.cloud.gov/logo192.png
  • Storable but Non-Cacheable Content [10049] total: 4:
    • https://easey-dev.app.cloud.gov/manifest.json
    • https://easey-dev.app.cloud.gov/robots.txt
    • https://easey-dev.app.cloud.gov/favicon.ico
    • https://easey-dev.app.cloud.gov/logo192.png
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • https://easey-dev.app.cloud.gov/
    • https://easey-dev.app.cloud.gov/
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • https://easey-dev.app.cloud.gov/
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
  • Source Code Disclosure - SQL [10099] total: 2:
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/main.chunk.js
  • Trace.axd Information Leak [40029] total: 1:
    • https://easey-dev.app.cloud.gov/trace.axd
  • Dangerous JS Functions [10110] total: 2:
    • https://easey-dev.app.cloud.gov/static/js/main.chunk.js
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
  • Sub Resource Integrity Attribute Missing [90003] total: 1:
    • https://easey-dev.app.cloud.gov/
  • Modern Web Application [10109] total: 3:
    • https://easey-dev.app.cloud.gov/
    • https://easey-dev.app.cloud.gov/api/master-data-mgmt/SWAGGER/
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js
  • Directory Browsing [0] total: 1:
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js/
  • Absence of Anti-CSRF Tokens [10202] total: 1:
    • https://easey-dev.app.cloud.gov/static/js/1.chunk.js

View the following link to download the report. RunnerID:575697378

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov Resolved Alerts
  • Trace.axd Information Leak [40029] total: 1:

View the following link to download the report. RunnerID:578294797

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov New Alerts
  • Trace.axd Information Leak [40029] total: 1:
    • https://easey-dev.app.cloud.gov/trace.axd

View the following link to download the report. RunnerID:578376869

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov Resolved Alerts
  • .env Information Leak [40034] total: 1:

View the following link to download the report. RunnerID:591341515

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov New Alerts
  • .env Information Leak [40034] total: 1:
    • https://easey-dev.app.cloud.gov/.env

View the following link to download the report. RunnerID:591366877

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov Resolved Alerts
  • Trace.axd Information Leak [40029] total: 1:

View the following link to download the report. RunnerID:601593725

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov New Alerts
  • Trace.axd Information Leak [40029] total: 1:
    • https://easey-dev.app.cloud.gov/trace.axd

View the following link to download the report. RunnerID:601619854

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov Resolved Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 1:

View the following link to download the report. RunnerID:656307432

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov Resolved Alerts
  • .env Information Leak [40034] total: 1:

View the following link to download the report. RunnerID:685311810

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov New Alerts
  • .env Information Leak [40034] total: 1:
    • https://easey-dev.app.cloud.gov/.env

View the following link to download the report. RunnerID:685330144

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov Resolved Alerts
  • .env Information Leak [40034] total: 1:

View the following link to download the report. RunnerID:772903255

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov New Alerts
  • .env Information Leak [40034] total: 1:
    • https://easey-dev.app.cloud.gov/.env

View the following link to download the report. RunnerID:772936790

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov Resolved Alerts
  • .env Information Leak [40034] total: 1:

View the following link to download the report. RunnerID:779728470

[github-actions[bot]]

• Site: https://easey-dev.app.cloud.gov New Alerts
  • .env Information Leak [40034] total: 1:
    • https://easey-dev.app.cloud.gov/.env

View the following link to download the report. RunnerID:781929074