endpointlabs / VulnerableDotNetCore3Project

.Net Core 3.0
0 stars 0 forks source link

Errors unhandled. (CWE-703) #56

Open cbilgin23 opened 2 years ago

cbilgin23 commented 2 years ago

Due Date: 2022-10-27

A low severity vulnerability has been discovered in your project.

Project Name: twrap-go

Scanner Name: gosec

Cwe ID: 703

Cwe Name: Improper Check or Handling of Exceptional Conditions

Cwe Link: https://cwe.mitre.org/data/definitions/703.html

File: pkg/scanner/sast_psalm.go

Line: 62

Code:

-57 -   if !p.Params.Manual && p.Params.Project.Actions.Repo.Path == "" {
-58 -       return errors.New("missing repository information")
-59 -   }
-60 - 
-61 -   h := sha256.New()
*62 -   h.Write([]byte(strconv.FormatInt(time.Now().UnixNano(), 10)))
-63 -   hash := fmt.Sprintf("%x", h.Sum(nil))
-64 -   if hash == "" {
-65 -       return errors.New("failed to create hash for directory path")
-66 -   }
-67 -   p.SetScanValue(hash)
-68 - 


Language: go

Commit Author: Adem Şahin

Commit Link: (https://github.com/endpointlabs/twrap-go/commit/1e992ace5c7b716052a63f7cd82650966e7fcc18)

Tool Description: Errors unhandled.

Custom Description: test

Kondukto Link: http://79.kondukto.local/projects/634fe837a5be8478724352c4/vulns/appsec?page=1&perPage=15&id=in:6358dcdeb8bfc0fbb2c3b8fa Deeplink: https://cwe.mitre.org/data/definitions/703.html