endpointlabs / VulnerableDotNetCore3Project

.Net Core 3.0
0 stars 0 forks source link

Errors unhandled. (CWE-703) #55

Open cbilgin23 opened 2 years ago

cbilgin23 commented 2 years ago

Due Date: 2022-10-27

A low severity vulnerability has been discovered in your project.

Project Name: twrap-go

Scanner Name: gosec

Cwe ID: 703

Cwe Name: Improper Check or Handling of Exceptional Conditions

Cwe Link: https://cwe.mitre.org/data/definitions/703.html

File: pkg/kolumba/kolumba.go

Line: 162

Code:

-157 -          buf.WriteString(fmt.Sprintf("%s: %s\r\n", header.Key, header.Value))
-158 -      }
-159 -  }
-160 - 
-161 -  h := sha1.New()
*162 -  h.Write([]byte(strconv.Itoa(int(time.Now().UnixNano()))))
-163 -  boundary := fmt.Sprintf("%x", h.Sum(nil))
-164 - 
-165 -  if len(mail.Attachments) > 0 {
-166 -      buf.WriteString("Content-Type: multipart/mixed; boundary=" + boundary + "\r\n")
-167 -      buf.WriteString("\r\n--" + boundary + "\r\n")
-168 -  }


Language: go

Commit Author: sbalka

Commit Link: (https://github.com/endpointlabs/twrap-go/commit/31cd797c4b4d5251114ed583a57243dce1908d11)

Tool Description: Errors unhandled.

Custom Description: test

Kondukto Link: http://79.kondukto.local/projects/634fe837a5be8478724352c4/vulns/appsec?page=1&perPage=15&id=in:6358dcdeb8bfc0fbb2c3b900 Deeplink: https://cwe.mitre.org/data/definitions/703.html