search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Privacy_Violation @ WebGoatCoins/CustomerLogin.aspx.cs [master] #198

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Privacy_Violation issue exists @ WebGoatCoins/CustomerLogin.aspx.cs in branch master

Method ButtonLogOn_Click at line 31 of WebGoatCoins\CustomerLogin.aspx.cs sends user information outside the application. This may constitute a Privacy Violation.

Severity: Medium

CWE:359

Checkmarx

Lines: 36

Code (Line #36):

            log.Info("User " + email + " attempted to log in with password " + pwd);