search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Improper_Resource_Shutdown_or_Release @ Code/SQLiteProfileProvider.cs [master] #77

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Improper_Resource_Shutdown_or_Release issue exists @ Code/SQLiteProfileProvider.cs in branch master

The application's ConvertObjectToString method in Code\SQLiteProfileProvider.cs defines and initializes the StringWriter object at 968. This object encapsulates a limited computing resource, such as open file streams, database connections, or network streams. This resource is not properly closed and released in all situations. 

Severity: Low

CWE:404

Checkmarx

Lines: 1057 997

Code (Line #1057):

                StringReader sr = new StringReader (attValue);

Code (Line #997):

                    StringWriter sw = new StringWriter (CultureInfo.InvariantCulture);
jbruinaud commented 4 years ago

Issue still exists.

SUMMARY

Issue has total 2 vulnerabilities left to be fix (Please scroll to the top for more information)