ZAP Scan Baseline Report

[vc-ci]

• Site: https://vcptcore-dev.govirto.com New Alerts
  • CSP: Wildcard Directive [10055] total: 2:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
  • CSP: script-src unsafe-inline [10055] total: 2:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
  • CSP: style-src unsafe-inline [10055] total: 2:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
  • Sub Resource Integrity Attribute Missing [90003] total: 2:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
  • Dangerous JS Functions [10110] total: 4:
    • https://vcptcore-dev.govirto.com/dist/app.js?v=QcIhMqmMPTnqdP_Lm-dvfqW-eExW_BvdhEv4-GJJ6jc
    • https://vcptcore-dev.govirto.com/dist/vendor.js?v=CrgXH2EvizBu-H2lezNUn_MMVPmmzwrPvCcvlbUoFiQ
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.CustomerExportImport)/dist/app.js?v=Ni_H73ZpsMtyr-0vdYbdGkX63Ix8m5ENPcDgNCPg2UQ
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=Gx54drFiY-ENv-Be4qH5jfR-YiymsQdgVlCIOfmDKjM
  • Permissions Policy Header Not Set [10063] total: 11:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Assets)/dist/app.js?v=CUBQus5NuARE0JP9znNYzikAV0QOTQ4YnR6yXdr2o5w
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Core)/dist/app.js?v=GMMit6HpV34jawzXX2RVzs2TJBmYycnES02Q3UrXbJk
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Customer)/dist/app.js?v=CHDckbHr7cbF8KL4zci0HtdT-tQbgXXEQi5aNu7caKM
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Notifications)/dist/app.js?v=Gx54drFiY-ENv-Be4qH5jfR-YiymsQdgVlCIOfmDKjM
  • Base64 Disclosure [10094] total: 12:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Content)/dist/style.css?v=W-ZSCF_AdUts-t2_DjAEWtDegp-FsKjC4ncgpOuB07Y
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Assets)/dist/app.js?v=CUBQus5NuARE0JP9znNYzikAV0QOTQ4YnR6yXdr2o5w
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/app.js?v=QtPLQUAKQR5lVAlUJ1zlND28EzAB_BfPPhFw8gYORtM
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Content)/dist/app.js?v=YEy9Co-n-ROPmErKbBUEvvueCQk4oW5XIu3oYq_RgzE
    • ..
  • Modern Web Application [10109] total: 2:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
  • Re-examine Cache-control Directives [10015] total: 3:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
    • https://vcptcore-dev.govirto.com/robots.txt
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/robots.txt
    • https://vcptcore-dev.govirto.com/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/robots.txt
    • https://vcptcore-dev.govirto.com/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/robots.txt
    • https://vcptcore-dev.govirto.com/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/robots.txt
    • https://vcptcore-dev.govirto.com/sitemap.xml
  • Storable and Cacheable Content [10049] total: 11:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Content)/dist/style.css?v=W-ZSCF_AdUts-t2_DjAEWtDegp-FsKjC4ncgpOuB07Y
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Customer)/dist/style.css?v=VexL7D7TvPYyKPfzXG32PVA8ZNJt_Q4e5C9PZXQr3G8
    • ..

View the following link to download the report. RunnerID:10285515353

---

ZAP is supported by the Crash Override Open Source Fellowship

[mvktsk]

Task https://virtocommerce.atlassian.net/browse/VP-8611 has been created

[vc-ci]

• Site: https://vcptcore-dev.govirto.com New Alerts
  • Retrieved from Cache [10050] total: 12:
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.CatalogPersonalization)/dist/style.css?v=6JDD72mkhUwLlNVbmLIFsRwIx_TxsCtubcuPFRQ-M4g
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Content)/dist/style.css?v=W-ZSCF_AdUts-t2_DjAEWtDegp-FsKjC4ncgpOuB07Y
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.CustomerExportImport)/dist/style.css?v=zlX1xZ9gNoVCWTnU3JHoAZ0aEY6I57fSUoHZ0Bd-zPE
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.CustomerReviews)/dist/style.css?v=zRwzWqWUz8alZymhUA-sdo7NGgOWnNtXxdzcytHg0WM
    • ..

View the following link to download the report. RunnerID:10834678197

[vc-ci]

• Site: https://vcptcore-dev.govirto.com Resolved Alerts
  • Retrieved from Cache [10050] total: 12:

View the following link to download the report. RunnerID:10957056141

[vc-ci]

• Site: https://vcptcore-dev.govirto.com New Alerts
  • Retrieved from Cache [10050] total: 12:
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Content)/dist/style.css?v=W-ZSCF_AdUts-t2_DjAEWtDegp-FsKjC4ncgpOuB07Y
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Core)/dist/style.css?v=JxV59GTG-OlnR0vCng7qmL0bUL_hI5YdQOSjYMpqEsw
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Customer)/dist/style.css?v=VexL7D7TvPYyKPfzXG32PVA8ZNJt_Q4e5C9PZXQr3G8
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Export)/dist/style.css?v=jiZ7EUUA6mUrnxE_mxjQq3Pvb-UDsH41RdhLJrUdrXY
    • ..

View the following link to download the report. RunnerID:11034025678

[vc-ci]

• Site: https://vcptcore-dev.govirto.com Resolved Alerts
  • Retrieved from Cache [10050] total: 12:

View the following link to download the report. RunnerID:11105611076

[vc-ci]

• Site: https://vcptcore-dev.govirto.com New Alerts
  • Retrieved from Cache [10050] total: 13:
    • https://vcptcore-dev.govirto.com/favicon.ico
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.CatalogPersonalization)/dist/style.css?v=6JDD72mkhUwLlNVbmLIFsRwIx_TxsCtubcuPFRQ-M4g
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Customer)/dist/style.css?v=VexL7D7TvPYyKPfzXG32PVA8ZNJt_Q4e5C9PZXQr3G8
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.CustomerReviews)/dist/style.css?v=zRwzWqWUz8alZymhUA-sdo7NGgOWnNtXxdzcytHg0WM
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Export)/dist/style.css?v=jiZ7EUUA6mUrnxE_mxjQq3Pvb-UDsH41RdhLJrUdrXY
    • ..

View the following link to download the report. RunnerID:11106283419

[vc-ci]

• Site: https://vcptcore-dev.govirto.com New Alerts

  • Cookie without SameSite Attribute [10054] total: 3:
    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/robots.txt
    • https://vcptcore-dev.govirto.com/sitemap.xml

  • Session Management Response Identified [10112] total: 3:

    • https://vcptcore-dev.govirto.com
    • https://vcptcore-dev.govirto.com/robots.txt
    • https://vcptcore-dev.govirto.com/sitemap.xml

    Resolved Alerts

  • Retrieved from Cache [10050] total: 13:

View the following link to download the report. RunnerID:11145528201

[vc-ci]

• Site: https://vcptcore-dev.govirto.com New Alerts
  • Retrieved from Cache [10050] total: 12:
    • https://vcptcore-dev.govirto.com/favicon.ico
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Content)/dist/style.css?v=W-ZSCF_AdUts-t2_DjAEWtDegp-FsKjC4ncgpOuB07Y
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Core)/dist/style.css?v=JxV59GTG-OlnR0vCng7qmL0bUL_hI5YdQOSjYMpqEsw
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Customer)/dist/style.css?v=VexL7D7TvPYyKPfzXG32PVA8ZNJt_Q4e5C9PZXQr3G8
    • ..

View the following link to download the report. RunnerID:11220205108

[vc-ci]

• Site: https://vcptcore-dev.govirto.com Resolved Alerts
  • Retrieved from Cache [10050] total: 12:

View the following link to download the report. RunnerID:11363893745

[vc-ci]

• Site: https://vcptcore-dev.govirto.com New Alerts
  • Retrieved from Cache [10050] total: 12:
    • https://vcptcore-dev.govirto.com/favicon.ico
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Content)/dist/style.css?v=W-ZSCF_AdUts-t2_DjAEWtDegp-FsKjC4ncgpOuB07Y
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Core)/dist/style.css?v=JxV59GTG-OlnR0vCng7qmL0bUL_hI5YdQOSjYMpqEsw
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Customer)/dist/style.css?v=VexL7D7TvPYyKPfzXG32PVA8ZNJt_Q4e5C9PZXQr3G8
    • ..

View the following link to download the report. RunnerID:11488723720

[vc-ci]

• Site: https://vcptcore-dev.govirto.com Resolved Alerts
  • Retrieved from Cache [10050] total: 12:

View the following link to download the report. RunnerID:11498969659

[vc-ci]

• Site: https://vcptcore-dev.govirto.com New Alerts
  • Retrieved from Cache [10050] total: 13:
    • https://vcptcore-dev.govirto.com/favicon.ico
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Catalog)/dist/style.css?v=Z_wcrI_74CPpGEznTeEexg7SU5lYBVj53SZZ2ZjvZ40
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Content)/dist/style.css?v=W-ZSCF_AdUts-t2_DjAEWtDegp-FsKjC4ncgpOuB07Y
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Core)/dist/style.css?v=JxV59GTG-OlnR0vCng7qmL0bUL_hI5YdQOSjYMpqEsw
    • https://vcptcore-dev.govirto.com/modules/$(VirtoCommerce.Customer)/dist/style.css?v=VexL7D7TvPYyKPfzXG32PVA8ZNJt_Q4e5C9PZXQr3G8
    • ..

View the following link to download the report. RunnerID:11500064251

[vc-ci]

• Site: https://vcptcore-dev.govirto.com Resolved Alerts
  • Retrieved from Cache [10050] total: 13:

View the following link to download the report. RunnerID:11512794860