ZAP API Scan Report

[github-actions[bot]]

• Site: http://localhost:8080 New Alerts
  • X-Content-Type-Options Header Missing [10021] total: 3:
    • http://localhost:8080/flights/KA0284/details
    • http://localhost:8080/flights?date=2024-03-20
    • http://localhost:8080/health
  • A Client Error response code was returned by the server [100000] total: 222:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/._darcs
    • http://localhost:8080/.bzr
    • http://localhost:8080/.DS_Store
    • ..
  • Storable and Cacheable Content [10049] total: 4:
    • http://localhost:8080/flights/KA0284
    • http://localhost:8080/flights/KA0284/details
    • http://localhost:8080/flights?date=2024-03-20
    • http://localhost:8080/health

View the following link to download the report. RunnerID:10177131390

---

ZAP is supported by the Crash Override Open Source Fellowship

[github-actions[bot]]

• Site: http://localhost:8082 New Alerts
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 1:
    • http://localhost:8082/bookings
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 3:
    • http://localhost:8082/bookings
    • http://localhost:8082/health
    • http://localhost:8082/bookings
  • X-Content-Type-Options Header Missing [10021] total: 3:
    • http://localhost:8082/bookings
    • http://localhost:8082/health
    • http://localhost:8082/bookings
  • A Client Error response code was returned by the server [100000] total: 6:
    • http://localhost:8082
    • http://localhost:8082/
    • http://localhost:8082/5707121294699763947
    • http://localhost:8082/actuator/health
    • http://localhost:8082/bookings
    • ..
  • Non-Storable Content [10049] total: 1:
    • http://localhost:8082/bookings
  • Storable and Cacheable Content [10049] total: 2:
    • http://localhost:8082/bookings
    • http://localhost:8082/health

View the following link to download the report. RunnerID:11232865223