search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Improper_Transaction_Handling @ Code/SQLiteProfileProvider.cs [master] #151

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Improper_Transaction_Handling issue exists @ Code/SQLiteProfileProvider.cs in branch master

The application's SetPropertyValues method in Code\SQLiteProfileProvider.cs creates and opens a connection to the database, and enlists it in a transaction. Though the application wraps the connection in a try { } block to handle exceptions, the database transaction is not always rolled back on errors. 

Severity: Low

CWE:460

Checkmarx

Lines: 197 333 286

Code (Line #197):

            try {

Code (Line #333):

            try {

Code (Line #286):

            try {
jbruinaud commented 4 years ago

Issue still exists.

SUMMARY

Issue has total 3 vulnerabilities left to be fix (Please scroll to the top for more information)