jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Improper_Exception_Handling @ App_Code/DB/MySqlDbProvider.cs [master] #140

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Improper_Exception_Handling issue exists @ App_Code/DB/MySqlDbProvider.cs in branch master

Method GetCatalogData at line 80 of App_Code\DB\MySqlDbProvider.cs performs an operation that could be expected to throw an exception, and is not properly wrapped in a try-catch block. This constitutes Improper Exception Handling.

Severity: Low

CWE:248

Checkmarx

Lines: 384 128 449 417 421 104 266 332 525 397 497 465 501 567 87 252


Code (Line #384):

                da.Fill(ds);

Code (Line #128):

                da.Fill(ds);

Code (Line #449):

                da.Fill(ds);

Code (Line #417):

                da.Fill(ds, "products");

Code (Line #421):

                da.Fill(ds, "comments");

Code (Line #104):

            log.Info("Running recreate");

Code (Line #266):

                da.Fill(ds);

Code (Line #332):

                da.Fill(ds);

Code (Line #525):

                da.Fill(ds); // 

Code (Line #397):

                da.Fill(ds);

Code (Line #497):

                da.Fill(ds, "categories");

Code (Line #465):

                da.Fill(ds);

Code (Line #501):

                da.Fill(ds, "products");

Code (Line #567):

                da.Fill(ds);

Code (Line #87):

                da.Fill(ds);

Code (Line #252):

                da.Fill(ds);

jbruinaud commented 4 years ago

Issue still exists.

SUMMARY

Issue has total 16 vulnerabilities left to be fix (Please scroll to the top for more information)