search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Improper_Transaction_Handling @ Code/SQLiteRoleProvider.cs [master] #156

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Improper_Transaction_Handling issue exists @ Code/SQLiteRoleProvider.cs in branch master

The application's AddUsersToRoles method in Code\SQLiteRoleProvider.cs creates and opens a connection to the database, and enlists it in a transaction. Though the application wraps the connection in a try { } block to handle exceptions, the database transaction is not always rolled back on errors. 

Severity: Low

CWE:460

Checkmarx

Lines: 514 284 174

Code (Line #514):

            try {

Code (Line #284):

            try {

Code (Line #174):

            try {
jbruinaud commented 4 years ago

Issue still exists.

SUMMARY

Issue has total 3 vulnerabilities left to be fix (Please scroll to the top for more information)