cisagov / XFD

CyHy Dashboard
Creative Commons Zero v1.0 Universal
6 stars 4 forks source link

Resolve frontend api abuse findings (CRASM-731) #649

Open ameliav opened 1 day ago

ameliav commented 1 day ago

๐Ÿ—ฃ Description

API Abuse (Low severity) CWE-227: 7PK - API Abuse

All files are found in the frontend/src folder.

Report ID Location Code Commit ID
1280480 pages/Vulnerabilities/Vulnerabilities.tsx:458 <br></br> 2ebcf1d
1280540 types/webpage.ts:2 import { Domain } from './domain'; 19661bc
1280616 types/vulnerability.ts:1 import { Domain, Service } from './domain'; e0e6dab
1280628 pages/Domains/Domains.tsx:152 <br></br> 2ebcf1d
1280645 pages/Organization/Organization.tsx:494 <br></br> 2ebcf1d

๐Ÿ’ญ Motivation and context

Resolve Checkmarx findings for the category API Abuse that are in the frontend. https://maestro.dhs.gov/jira/browse/CRASM-731

๐Ÿงช Testing

โœ… Pre-approval checklist

โœ… Pre-merge checklist

โœ… Post-merge checklist