ZAP Full Scan Report - Githubissues

aknot242 / devsecops-poc

3 stars 4 forks source link

ZAP Full Scan Report #9

Closed github-actions[bot] closed 3 years ago

github-actions[bot] commented 3 years ago

Site: http://devsecops-poc-stage.28d5d6771fc84adba80b.westus2.aksapp.io New Alerts
- User Agent Fuzzer [10104] total: 14:
- Cookie Slack Detector [90027] total: 20:
- Information Disclosure - Suspicious Comments [10027] total: 3:
- Timestamp Disclosure - Unix [10096] total: 1:
  - http://devsecops-poc-stage.28d5d6771fc84adba80b.westus2.aksapp.io/lib/jquery-validation/dist/jquery.validate.min.js
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 1:
  - http://devsecops-poc-stage.28d5d6771fc84adba80b.westus2.aksapp.io/?SearchString=ZAP
- Modern Web Application [10109] total: 1:
  - http://devsecops-poc-stage.28d5d6771fc84adba80b.westus2.aksapp.io/lib/jquery/dist/jquery.min.js
- Cross Site Scripting (Reflected) [40012] total: 1:
  - http://devsecops-poc-stage.28d5d6771fc84adba80b.westus2.aksapp.io/?SearchString=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E
  Ignored Alerts
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
- CSP: script-src unsafe-inline [10055] total: 5:
- CSP: Notices [10055] total: 5:
- Absence of Anti-CSRF Tokens [10202] total: 2:
- Vulnerable JS Library [10003] total: 1:

View the following link to download the report. RunnerID:1076496931

github-actions[bot] commented 3 years ago

Site: http://devsecops-poc-stage.28d5d6771fc84adba80b.westus2.aksapp.io Resolved Alerts
- Cross Site Scripting (Reflected) [40012] total: 1:

View the following link to download the report. RunnerID:1076536114