CX Spring_Missing_Object_Level_Authorization @ webgoat-lessons/crypto/src/main/java/org/owasp/webgoat/crypto/EncodingAssignment.java [develop]

[mgonzalezcx]

Spring_Missing_Object_Level_Authorization issue exists @ webgoat-lessons/crypto/src/main/java/org/owasp/webgoat/crypto/EncodingAssignment.java in branch develop

Line 47 flags a method or annotation that could be a potential unauthorized access to object available in the corresponding controller. This query is looking for possible flaws in Spring-Security configuration, so only projects that use Spring-Security are considered.

Severity: Information

CWE:862

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 45

---

Code (Line #45):

    @GetMapping(path="/crypto/encoding/basic",produces=MediaType.TEXT_HTML_VALUE)

---