CX Spring_Missing_Function_Level_Authorization @ webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/xss/CrossSiteScriptingLesson1.java [develop]

[mgonzalezcx]

Spring_Missing_Function_Level_Authorization issue exists @ webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/xss/CrossSiteScriptingLesson1.java in branch develop

Line 39 flags a method or annotation that could be a potential unauthorized access to object available in the corresponding controller. This query is looking for possible flaws in Spring-Security configuration, so only projects that use Spring-Security are considered.

Severity: Information

CWE:862

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 37

---

Code (Line #37):

    @PostMapping("/CrossSiteScripting/attack1")

---