search

mgonzalezcx / WebGoat

WebGoat is a deliberately insecure application
https://webgoat.github.io/WebGoat/
Other
0 stars 0 forks source link

CX Improper_Resource_Access_Authorization @ webgoat-container/src/main/java/org/owasp/webgoat/LessonTemplateResolver.java [develop] #15

Open mgonzalezcx opened 2 years ago

mgonzalezcx commented 2 years ago

Improper_Resource_Access_Authorization issue exists @ webgoat-container/src/main/java/org/owasp/webgoat/LessonTemplateResolver.java in branch develop

An I\O action occurs at webgoat-container\src\main\java\org\owasp\webgoat\LessonTemplateResolver.java in 67 without authorization checks.

Severity: Low

CWE:285

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 72

Code (Line #72):

                resource = resourceLoader.getResource("classpath:/html/" + templateName + ".html").getInputStream().readAllBytes();