ZAP Full Scan Report - Githubissues

iArcanic / pacific-tours-ccse-cw1

1 stars 0 forks source link

ZAP Full Scan Report #1

Open github-actions[bot] opened 6 months ago

github-actions[bot] commented 6 months ago

Site: https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/robots.txt
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/sitemap.xml
- Proxy Disclosure [40025] total: 4:
- Application Error Disclosure [90022] total: 2:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/
- Permissions Policy Header Not Set [10063] total: 2:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/robots.txt
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/sitemap.xml
- Strict-Transport-Security Header Not Set [10035] total: 4:
- Non-Storable Content [10049] total: 2:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/
- Storable and Cacheable Content [10049] total: 2:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/robots.txt
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/sitemap.xml
- User Agent Fuzzer [10104] total: 24:

View the following link to download the report. RunnerID:9053312218

ZAP is supported by the Crash Override Open Source Fellowship

github-actions[bot] commented 6 months ago

Site: https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app Resolved Alerts
- Proxy Disclosure [40025] total: 4:

View the following link to download the report. RunnerID:9068666854

github-actions[bot] commented 5 months ago

Site: https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app New Alerts
- Missing Anti-clickjacking Header [10020] total: 6:
- Proxy Disclosure [40025] total: 35:
- Vulnerable JS Library [10003] total: 1:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/Identity/lib/jquery-validation/dist/jquery.validate.js
- Cookie Without Secure Flag [10011] total: 2:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/Identity/Account/Login
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/Identity/Account/Register
- Dangerous JS Functions [10110] total: 1:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/lib/jquery/dist/jquery.min.js
- X-Content-Type-Options Header Missing [10021] total: 11:
- Authentication Request Identified [10111] total: 1:
  - https://pacific-tours-cloud-run-service-3dobb3jvdq-nw.a.run.app/Identity/Account/Login
- Cookie Slack Detector [90027] total: 12:
- Information Disclosure - Suspicious Comments [10027] total: 11:
- Re-examine Cache-control Directives [10015] total: 8:
- Session Management Response Identified [10112] total: 3:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 8:
  Resolved Alerts
- Application Error Disclosure [90022] total: 2:

View the following link to download the report. RunnerID:9128239031