search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Information_Exposure_Through_an_Error_Message @ Content/ForgotPassword.aspx.cs [master] #141

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Information_Exposure_Through_an_Error_Message issue exists @ Content/ForgotPassword.aspx.cs in branch master

Method ButtonRecoverPassword_Click, at line 66 of Content\ForgotPassword.aspx.cs, handles an Exception or runtime Error Message. During the exception handling code, the application exposes the exception details to Text, in method ButtonRecoverPassword_Click of Content\ForgotPassword.aspx.cs, line 66.

Severity: Low

CWE:209

Checkmarx

Lines: 86

Code (Line #86):

                labelMessage.Text = "An unknown error occurred - Do you have cookies turned on? Further Details: " + ex.Message;
jbruinaud commented 4 years ago

Issue still exists.

SUMMARY

Issue has total 1 vulnerabilities left to be fix (Please scroll to the top for more information)