search

mgonzalezcx / WebGoat

WebGoat is a deliberately insecure application
https://webgoat.github.io/WebGoat/
Other
0 stars 0 forks source link

CX Portability_Flaw_In_File_Separator @ webgoat-lessons/xxe/src/main/java/org/owasp/webgoat/xxe/Ping.java [develop] #13

Open mgonzalezcx opened 2 years ago

mgonzalezcx commented 2 years ago

Portability_Flaw_In_File_Separator issue exists @ webgoat-lessons/xxe/src/main/java/org/owasp/webgoat/xxe/Ping.java in branch develop

Severity: Information

CWE:474

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 52

Code (Line #52):

        File logFile = new File(webGoatHomeDirectory, "/XXE/log" + webSession.getUserName() + ".txt");