search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Heap_Inspection @ Content/ForgotPassword.aspx [master] #138

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Heap_Inspection issue exists @ Content/ForgotPassword.aspx in branch master

Method ID="labelPassword"></asp:Literal> at line 50 of Content\ForgotPassword.aspx defines labelPassword, which is designated to contain user passwords. However, while plaintext passwords are later assigned to labelPassword, this variable is never cleared from memory. 

Severity: Medium

CWE:244

Checkmarx

Lines: 50

Code (Line #50):

            <asp:Literal runat="server" EnableViewState="False" ID="labelPassword"></asp:Literal>
jbruinaud commented 4 years ago

Issue still exists.

SUMMARY

Issue has total 1 vulnerabilities left to be fix (Please scroll to the top for more information)