ZAP Full Scan Report - Githubissues

bsalab / gitaction-lab-api

0 stars 0 forks source link

ZAP Full Scan Report #1

Open github-actions[bot] opened 2 years ago

github-actions[bot] commented 2 years ago

Site: https://bird-api8-demo-testing.azurewebsites.net New Alerts
- Proxy Disclosure [40025] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
- Content-Type Header Missing [10019] total: 4:

View the following link to download the report. RunnerID:1601614654

github-actions[bot] commented 2 years ago

Site: https://bird-api8-demo-testing.azurewebsites.net New Alerts
- Insecure HTTP Method - DELETE [90028] total: 2:
  - https://bird-api8-demo-testing.azurewebsites.net
  - https://bird-api8-demo-testing.azurewebsites.net/
- User Agent Fuzzer [10104] total: 14:
  Resolved Alerts
- Strict-Transport-Security Header Not Set [10035] total: 4:
- Content-Type Header Missing [10019] total: 4:

View the following link to download the report. RunnerID:1601640670

github-actions[bot] commented 2 years ago

Site: http://bird-api8-demo-testing.azurewebsites.net New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - http://bird-api8-demo-testing.azurewebsites.net/swagger-ui.html
  - http://bird-api8-demo-testing.azurewebsites.net/swagger-ui.html?apiKey=ZAP&baseUrl=ZAP
- Vulnerable JS Library [10003] total: 2:
  - http://bird-api8-demo-testing.azurewebsites.net/webjars/springfox-swagger-ui/lib/handlebars-2.0.0.js
  - http://bird-api8-demo-testing.azurewebsites.net/webjars/springfox-swagger-ui/lib/jquery-1.8.0.min.js
- Absence of Anti-CSRF Tokens [10202] total: 3:
- Timestamp Disclosure - Unix [10096] total: 7:
- Information Disclosure - Suspicious Comments [10027] total: 11:
- Modern Web Application [10109] total: 5:
Site: https://bird-api8-demo-testing.azurewebsites.net New Alerts
- Strict-Transport-Security Header Not Set [10035] total: 4:

View the following link to download the report. RunnerID:1603009091