ZAP API Scan Report - Githubissues

bcgov / moh-phlat

Repository for the PHLAT registries data loading application

Apache License 2.0

2 stars 0 forks source link

ZAP API Scan Report #46

Open github-actions[bot] opened 4 months ago

github-actions[bot] commented 4 months ago

Site: https://phlatapi-dev.hlth.gov.bc.ca New Alerts
- Application Error Disclosure [90022] total: 1:
  - https://phlatapi-dev.hlth.gov.bc.ca/v3/api-docs
- Cookie No HttpOnly Flag [10010] total: 14:
- Cookie Without Secure Flag [10011] total: 13:
- Cookie with SameSite Attribute None [10054] total: 5:
- Cookie without SameSite Attribute [10054] total: 9:
- Information Disclosure - Debug Error Messages [10023] total: 1:
  - https://phlatapi-dev.hlth.gov.bc.ca/v3/api-docs
- Strict-Transport-Security Header Not Set [10035] total: 12:
- Unexpected Content-Type was returned [100001] total: 319:
- A Client Error response code was returned by the server [100000] total: 833:
- Non-Storable Content [10049] total: 12:
- Session Management Response Identified [10112] total: 12:

View the following link to download the report. RunnerID:8713460799

ZAP is supported by the Crash Override Open Source Fellowship

github-actions[bot] commented 4 months ago

Site: https://phlatapi-test.hlth.gov.bc.ca New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs
- Permissions Policy Header Not Set [10063] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs
- Strict-Transport-Security Header Not Set [10035] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs
- Unexpected Content-Type was returned [100001] total: 69:
- A Client Error response code was returned by the server [100000] total: 70:
- Non-Storable Content [10049] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs

View the following link to download the report. RunnerID:8745379915

github-actions[bot] commented 4 months ago

Site: https://phlatapi-dev.hlth.gov.bc.ca New Alerts
- Application Error Disclosure [90022] total: 1:
  - https://phlatapi-dev.hlth.gov.bc.ca/v3/api-docs
- Cookie No HttpOnly Flag [10010] total: 14:
- Cookie Without Secure Flag [10011] total: 13:
- Cookie with SameSite Attribute None [10054] total: 7:
- Cookie without SameSite Attribute [10054] total: 13:
- Information Disclosure - Debug Error Messages [10023] total: 1:
  - https://phlatapi-dev.hlth.gov.bc.ca/v3/api-docs
- Strict-Transport-Security Header Not Set [10035] total: 13:
- Unexpected Content-Type was returned [100001] total: 319:
- A Client Error response code was returned by the server [100000] total: 833:
- Non-Storable Content [10049] total: 12:
- Session Management Response Identified [10112] total: 13:

View the following link to download the report. RunnerID:8745493108

github-actions[bot] commented 4 months ago

Site: https://phlatapi-dev.hlth.gov.bc.ca New Alerts
- Format String Error [30002] total: 8:

View the following link to download the report. RunnerID:8745979784

github-actions[bot] commented 1 month ago

Site: https://phlatapi-dev.hlth.gov.bc.ca Resolved Alerts
- Format String Error [30002] total: 8:

View the following link to download the report. RunnerID:9897959430

github-actions[bot] commented 1 month ago

Site: https://phlatapi-test.hlth.gov.bc.ca New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs
- CSP: script-src unsafe-eval [10055] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs
- CSP: style-src unsafe-inline [10055] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs
- Unexpected Content-Type was returned [100001] total: 69:
- A Client Error response code was returned by the server [100000] total: 70:
- Non-Storable Content [10049] total: 1:
  - https://phlatapi-test.hlth.gov.bc.ca/v3/api-docs

View the following link to download the report. RunnerID:10043802266

github-actions[bot] commented 1 month ago

Site: https://phlatapi-dev.hlth.gov.bc.ca New Alerts
- Application Error Disclosure [90022] total: 1:
  - https://phlatapi-dev.hlth.gov.bc.ca/v3/api-docs
- Cookie No HttpOnly Flag [10010] total: 12:
- Cookie Without Secure Flag [10011] total: 12:
- Cookie with SameSite Attribute None [10054] total: 5:
- Cookie without SameSite Attribute [10054] total: 9:
- Information Disclosure - Debug Error Messages [10023] total: 1:
  - https://phlatapi-dev.hlth.gov.bc.ca/v3/api-docs
- Unexpected Content-Type was returned [100001] total: 327:
- A Client Error response code was returned by the server [100000] total: 903:
- Non-Storable Content [10049] total: 12:
- Session Management Response Identified [10112] total: 12:

View the following link to download the report. RunnerID:10044388263