jbruinaud / BodgeitCxFlowGithub

0 stars 0 forks source link

CX CSRF @ root/password.jsp [master] #25

Open jbruinaud opened 2 years ago

jbruinaud commented 2 years ago

CSRF issue exists @ root/password.jsp in branch master

Method = at line 10 of root\password.jsp gets a parameter from a user request from ""password1"". This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).

Severity: Medium

CWE:352

Checkmarx

Training Recommended Fix

Lines: 10


Code (Line #10):

String password1 = (String) request.getParameter("password1");