Monitor Plan Mgmt API ZAP Scan - Githubissues

US-EPA-CAMD / devops

Common DevOps files & build scripts for CI/CD pipelines

https://epa.gov/airmarkets

MIT License

1 stars 0 forks source link

Monitor Plan Mgmt API ZAP Scan #60

Open github-actions[bot] opened 11 months ago

github-actions[bot] commented 11 months ago

Site: https://api.epa.gov New Alerts
- A Server Error response code was returned by the server [100000] total: 2:
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/export?planId=planId
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/planId
- Application Error Disclosure [90022] total: 2:
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/export?planId=planId
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/planId
- Information Disclosure - Debug Error Messages [10023] total: 2:
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/locations/locId
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/locations/locId/relationships
- Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 12:
- A Client Error response code was returned by the server [100000] total: 72:
- Non-Storable Content [10049] total: 11:
- Retrieved from Cache [10050] total: 12:
Site: https://api-easey-dev.app.cloud.gov New Alerts
- Unexpected Content-Type was returned [100001] total: 4:
- A Client Error response code was returned by the server [100000] total: 67:
- Non-Storable Content [10049] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json

View the following link to download the report. RunnerID:5560892891

github-actions[bot] commented 11 months ago

Site: https://api.epa.gov New Alerts
- Sec-Fetch-Dest Header is Missing [90005] total: 2:
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/export?planId=planId
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/planId
- Sec-Fetch-Mode Header is Missing [90005] total: 2:
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/export?planId=planId
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/planId
- Sec-Fetch-Site Header is Missing [90005] total: 2:
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/export?planId=planId
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/planId
- Sec-Fetch-User Header is Missing [90005] total: 2:
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/export?planId=planId
  - https://api.epa.gov/easey/dev/monitor-plan-mgmt/plans/planId
Site: https://api-easey-dev.app.cloud.gov New Alerts
- Sec-Fetch-Dest Header is Missing [90005] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json
- Sec-Fetch-Mode Header is Missing [90005] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json
- Sec-Fetch-Site Header is Missing [90005] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json
- Sec-Fetch-User Header is Missing [90005] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json

View the following link to download the report. RunnerID:5629287246

github-actions[bot] commented 10 months ago

Site: https://api.epa.gov
Site: https://api-easey-dev.app.cloud.gov Resolved Alerts
- Sec-Fetch-Dest Header is Missing [90005] total: 1:
- Sec-Fetch-Mode Header is Missing [90005] total: 1:
- Sec-Fetch-Site Header is Missing [90005] total: 1:
- Sec-Fetch-User Header is Missing [90005] total: 1:

View the following link to download the report. RunnerID:5839877379

github-actions[bot] commented 10 months ago

Site: https://api.epa.gov
Site: https://api-easey-dev.app.cloud.gov New Alerts
- Sec-Fetch-Dest Header is Missing [90005] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json
- Sec-Fetch-Mode Header is Missing [90005] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json
- Sec-Fetch-Site Header is Missing [90005] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json
- Sec-Fetch-User Header is Missing [90005] total: 1:
  - https://api-easey-dev.app.cloud.gov/monitor-plan-mgmt/swagger-json

View the following link to download the report. RunnerID:5983329987