The below list presents the 1 high vulnerability findings that need your attention. To view information on these findings, navigate to the Mend SAST Application.
The below list presents the 7 high vulnerability findings that need your attention. To view information on these findings, navigate to the Mend SAST Application.
The below list presents the 20 most relevant findings that need your attention. To view information on the remaining findings, navigate to the Mend SAST Application.
Code Security Report
Latest Scan: 2022-10-20 08:20pm Total Findings: 376 Tested Project Files: 551 Detected Programming Languages: 5
Language: C/C++ (Beta)
Language: PHP
Details
Findings
myapp/checkout.php:36
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/server/iGoat-Server-challenges/myapp/checkout.php#L31-L36Trace
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/server/iGoat-Server-challenges/myapp/checkout.php#L8 https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/server/iGoat-Server-challenges/myapp/checkout.php#L13 https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/server/iGoat-Server-challenges/myapp/checkout.php#L14 https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/server/iGoat-Server-challenges/myapp/checkout.php#L36Language: Swift
Details
Findings
Random Key Generation/RandomKeyGenerationExerciseVC.swift:63
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Random Key Generation/RandomKeyGenerationExerciseVC.swift#L58-L63Random Key Generation/RandomKeyGenerationExerciseVC.swift:48
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Random Key Generation/RandomKeyGenerationExerciseVC.swift#L43-L48Random Key Generation/RandomKeyGenerationExerciseVC.swift:63
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Random Key Generation/RandomKeyGenerationExerciseVC.swift#L58-L63SQL Injection/SQLInjectionExerciseVC.swift:22
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/Source/Exercises/Injection Flaws/SQL Injection/SQLInjectionExerciseVC.swift#L17-L22SQL Injection/SQLInjectionExerciseVC.swift:22
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/Source/Exercises/Injection Flaws/SQL Injection/SQLInjectionExerciseVC.swift#L17-L22Random Key Generation/RandomKeyGenerationExerciseVC.swift:48
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Random Key Generation/RandomKeyGenerationExerciseVC.swift#L43-L48
File Manipulation (CWE-73) : 1
#### FindingsPlistStorage/PlistStorageExerciseViewController.swift:21
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/Source/Exercises/InsecureLocalDataStorage/PlistStorage/PlistStorageExerciseViewController.swift#L16-L21Language: iOS Objective-C
Details
Findings
YapDatabase/YapDatabaseTransaction.m:2015
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseTransaction.m#L2010-L2015SecondaryIndex/YapDatabaseSecondaryIndexTransaction.m:617
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/Extensions/SecondaryIndex/YapDatabaseSecondaryIndexTransaction.m#L612-L617YapDatabase/YapDatabaseConnection.m:971
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L966-L971SecondaryIndex/YapDatabaseSecondaryIndexTransaction.m:1279
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/Extensions/SecondaryIndex/YapDatabaseSecondaryIndexTransaction.m#L1274-L1279SecondaryIndex/YapDatabaseSecondaryIndexConnection.m:240
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/Extensions/SecondaryIndex/YapDatabaseSecondaryIndexConnection.m#L235-L240Views/YapDatabaseViewTransaction.m:288
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/Extensions/Views/YapDatabaseViewTransaction.m#L283-L288Views/YapDatabaseViewTransaction.m:1325
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/Extensions/Views/YapDatabaseViewTransaction.m#L1320-L1325Views/YapDatabaseViewConnection.m:793
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/Extensions/Views/YapDatabaseViewConnection.m#L788-L793YapDatabase/YapDatabaseConnection.m:1426
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1421-L1426YapDatabase/YapDatabaseConnection.m:1406
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1401-L1406YapDatabase/YapDatabaseConnection.m:1388
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1383-L1388YapDatabase/YapDatabaseConnection.m:1369
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1364-L1369YapDatabase/YapDatabaseConnection.m:1351
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1346-L1351YapDatabase/YapDatabaseConnection.m:1332
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1327-L1332YapDatabase/YapDatabaseConnection.m:1314
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1309-L1314YapDatabase/YapDatabaseConnection.m:1296
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1291-L1296YapDatabase/YapDatabaseConnection.m:1278
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1273-L1278YapDatabase/YapDatabaseConnection.m:1260
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1255-L1260YapDatabase/YapDatabaseConnection.m:1242
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1237-L1242YapDatabase/YapDatabaseConnection.m:1224
https://github.com/lukebrogan-mend/iGoat-Swift/blob/bec90e833f376d3570c37eb608921f3d895dbd83/iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabaseConnection.m#L1219-L1224Language: Ruby