CX Deserialization_of_Untrusted_Data @ src/main/java/org/owasp/webgoat/lessons/vulnerablecomponents/VulnerableComponentsLesson.java [main]

[dimihycks]

Deserialization_of_Untrusted_Data issue exists @ src/main/java/org/owasp/webgoat/lessons/vulnerablecomponents/VulnerableComponentsLesson.java in branch main

The serialized object payload processed in completed in the file src\main\java\org\owasp\webgoat\lessons\vulnerablecomponents\VulnerableComponentsLesson.java at line 40 is deserialized by fromXML in the file src\main\java\org\owasp\webgoat\lessons\vulnerablecomponents\VulnerableComponentsLesson.java at line 57.Similarity ID: -1346410211

Severity: High

CWE:502

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 40

---

Code (Line #40):

public @ResponseBody AttackResult completed(@RequestParam String payload) {

---

[dimihycks]

Issue still exists.