ZAP Full Scan Report - Githubissues

ardhihdyn / TestingZAP

0 stars 0 forks source link

ZAP Full Scan Report #1

Open github-actions[bot] opened 10 months ago

github-actions[bot] commented 10 months ago

Site: https://brainportstg.wpengine.com New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://brainportstg.wpengine.com/wp-sitemap.xml
- CSP: script-src unsafe-inline [10055] total: 1:
  - https://brainportstg.wpengine.com/wp-sitemap.xml
- CSP: style-src unsafe-inline [10055] total: 1:
  - https://brainportstg.wpengine.com/wp-sitemap.xml
- Cross-Domain Misconfiguration [10098] total: 3:
- Sub Resource Integrity Attribute Missing [90003] total: 3:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
  - https://brainportstg.wpengine.com/login
- Dangerous JS Functions [10110] total: 2:
  - https://brainportstg.wpengine.com/wp-content/themes/brainport/assets/js/dist/themes.vendors.min.js?ver=20230414073238
  - https://brainportstg.wpengine.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0
- Permissions Policy Header Not Set [10063] total: 5:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 2:
  - https://brainportstg.wpengine.com/login
  - https://brainportstg.wpengine.com/wp-sitemap.xml
- Strict-Transport-Security Header Not Set [10035] total: 12:
- X-Content-Type-Options Header Missing [10021] total: 3:
- Information Disclosure - Suspicious Comments [10027] total: 6:
- Re-examine Cache-control Directives [10015] total: 1:
  - https://brainportstg.wpengine.com/login
- Storable and Cacheable Content [10049] total: 3:
Site: http://brainportstg.wpengine.com New Alerts
- Bypassing 403 [40038] total: 17:
- CORS Misconfiguration [40040] total: 11:
- CSP: Wildcard Directive [10055] total: 3:
- CSP: script-src unsafe-inline [10055] total: 3:
- CSP: style-src unsafe-inline [10055] total: 3:
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - http://brainportstg.wpengine.com/
- Cross-Domain Misconfiguration [10098] total: 9:
- Sub Resource Integrity Attribute Missing [90003] total: 3:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
  - http://brainportstg.wpengine.com/login
- Dangerous JS Functions [10110] total: 2:
  - http://brainportstg.wpengine.com/wp-content/themes/brainport/assets/js/dist/themes.vendors.min.js?ver=20230414073238
  - http://brainportstg.wpengine.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0
- Permissions Policy Header Not Set [10063] total: 7:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 3:
- X-Content-Type-Options Header Missing [10021] total: 9:
- Information Disclosure - Suspicious Comments [10027] total: 8:
- Non-Storable Content [10049] total: 1:
  - http://brainportstg.wpengine.com/
- Storable and Cacheable Content [10049] total: 8:
- User Agent Fuzzer [10104] total: 276:

View the following link to download the report. RunnerID:6032603360

github-actions[bot] commented 10 months ago

Site: https://brainportstg.wpengine.com Resolved Alerts
- CSP: Wildcard Directive [10055] total: 1:
- CSP: script-src unsafe-inline [10055] total: 1:
- CSP: style-src unsafe-inline [10055] total: 1:
Site: http://brainportstg.wpengine.com New Alerts
- Hidden File Found [40035] total: 4:

View the following link to download the report. RunnerID:6035353038