search

mgonzalezcx / WebGoat

WebGoat is a deliberately insecure application
https://webgoat.github.io/WebGoat/
Other
0 stars 0 forks source link

CX Improper_Resource_Access_Authorization @ webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/sql_injection/advanced/SqlInjectionLesson6b.java [develop] #5

Open mgonzalezcx opened 2 years ago

mgonzalezcx commented 2 years ago

Improper_Resource_Access_Authorization issue exists @ webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/sql_injection/advanced/SqlInjectionLesson6b.java in branch develop

An I\O action occurs at webgoat-lessons\sql-injection\src\main\java\org\owasp\webgoat\sql_injection\advanced\SqlInjectionLesson6b.java in 60 without authorization checks.

Severity: Low

CWE:285

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 67 69

Code (Line #67):

                ResultSet results = statement.executeQuery(query);

Code (Line #69):

                if (results != null && results.first()) {