ZAP Full Scan Report

[edgarinhm]

• Site: http://localhost:8080 New Alerts
  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://localhost:8080/latest/meta-data/
  • CORS Misconfiguration [40040] total: 10:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge
    • http://localhost:8080/ols-react-challenge/assets
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..
  • Cross-Domain Misconfiguration [10098] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..
  • Missing Anti-clickjacking Header [10020] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..
  • Permissions Policy Header Not Set [10063] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..
  • Base64 Disclosure [10094] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..
  • Modern Web Application [10109] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..
  • Non-Storable Content [10049] total: 1:
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • http://localhost:8080/
    • http://localhost:8080/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • http://localhost:8080/
    • http://localhost:8080/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • http://localhost:8080/
    • http://localhost:8080/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • http://localhost:8080/
    • http://localhost:8080/robots.txt
  • Storable but Non-Cacheable Content [10049] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Cp1zxxzZ.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..

View the following link to download the report. RunnerID:9830180499

---

ZAP is supported by the Crash Override Open Source Fellowship

[edgarinhm]

• Site: http://localhost:8080 New Alerts
  • Relative Path Confusion [10051] total: 8:
    • http://localhost:8080/ols-react-challenge/assets/index-BRJsl6x2.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/assets/vite.svg
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • http://localhost:8080/ols-react-challenge/vite.svg
    • ..

View the following link to download the report. RunnerID:9830884399

[edgarinhm]

• Site: http://localhost:8080 Resolved Alerts
  • Base64 Disclosure [10094] total: 9:

View the following link to download the report. RunnerID:9831130890

[edgarinhm]

• Site: http://localhost:8080 New Alerts
  • Base64 Disclosure [10094] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/environment-config.js
    • http://localhost:8080/ols-react-challenge/assets/index-DDhN7YZV.js
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • http://localhost:8080/environment-config.js

View the following link to download the report. RunnerID:9901609382

[edgarinhm]

• Site: http://localhost:8080 New Alerts

  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 8:

    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-DWMSNdKI.css
    • http://localhost:8080/ols-react-challenge/assets/index-oiyW83bQ.js
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..

    Resolved Alerts

  • CORS Misconfiguration [40040] total: 12:
  • Cross-Domain Misconfiguration [10098] total: 10:
  • Relative Path Confusion [10051] total: 8:

View the following link to download the report. RunnerID:9920344062

[edgarinhm]

• Site: http://localhost:8080 Resolved Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 6:

View the following link to download the report. RunnerID:10030092132

[edgarinhm]

• Site: http://localhost:8080 Resolved Alerts
  • Base64 Disclosure [10094] total: 8:

View the following link to download the report. RunnerID:10031199350

[edgarinhm]

• Site: http://localhost:8080 New Alerts
  • Base64 Disclosure [10094] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-CH0JWuFb.js
    • http://localhost:8080/ols-react-challenge/assets/index-DVnvUQTB.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..

View the following link to download the report. RunnerID:10031322893

[edgarinhm]

• Site: http://localhost:8080 Resolved Alerts
  • Base64 Disclosure [10094] total: 8:

View the following link to download the report. RunnerID:10119524939

[edgarinhm]

• Site: http://localhost:8080 New Alerts
  • Base64 Disclosure [10094] total: 8:
    • http://localhost:8080
    • http://localhost:8080/
    • http://localhost:8080/ols-react-challenge/assets/index-Bgum90xc.js
    • http://localhost:8080/ols-react-challenge/assets/index-CYETJrm8.css
    • http://localhost:8080/ols-react-challenge/environment-config.js
    • ..

View the following link to download the report. RunnerID:10230729265

[edgarinhm]

• Site: http://localhost:8080 New Alerts
  • Tech Detected - Nginx [10004] total: 1:
    • http://localhost:8080/
  • Tech Detected - Vite [10004] total: 1:
    • http://localhost:8080/

View the following link to download the report. RunnerID:10986588951