cx-justin-ruth / CxFlowGithub

0 stars 0 forks source link

CX Information_Exposure_Through_an_Error_Message @ root/product.jsp [master] #28

Open cx-justin-ruth opened 2 years ago

cx-justin-ruth commented 2 years ago

Information_Exposure_Through_an_Error_Message issue exists @ root/product.jsp in branch master

Method catch, at line 95 of root\product.jsp, handles an Exception or runtime Error e. During the exception handling code, the application exposes the exception details to println, in method out.println of root\product.jsp, line 98.

Severity: Low

CWE:209

Vulnerability details and guidance

Checkmarx

Lines: 95


Code (Line #95):

    } catch (SQLException e) {