ZAP API Scan Report - Githubissues

rameshsingh1234 / DMS-CICD

0 stars 0 forks source link

ZAP API Scan Report #2

Open github-actions[bot] opened 3 weeks ago

github-actions[bot] commented 3 weeks ago

Site: https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com New Alerts
- Strict-Transport-Security Header Not Set [10035] total: 1:
  - https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/simulate
- Unexpected Content-Type was returned [100001] total: 2:
  - https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com?aaa=bbb
  - https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com?class.module.classLoader.DefaultAssertionStatus=nonsense
- A Client Error response code was returned by the server [100000] total: 69:
- Non-Storable Content [10049] total: 1:
  - https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/simulate
- Sec-Fetch-Dest Header is Missing [90005] total: 1:
  - https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/simulate
- Sec-Fetch-Mode Header is Missing [90005] total: 1:
  - https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/simulate
- Sec-Fetch-Site Header is Missing [90005] total: 1:
  - https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/simulate
- Sec-Fetch-User Header is Missing [90005] total: 1:
  - https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/simulate

View the following link to download the report. RunnerID:10522031306

ZAP is supported by the Crash Override Open Source Fellowship

github-actions[bot] commented 3 weeks ago

Site: https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com New Alerts
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com/switch2/pnotif
- Strict-Transport-Security Header Not Set [10035] total: 1:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com/switch2/pnotif
- Unexpected Content-Type was returned [100001] total: 2:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com?aaa=bbb
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com?class.module.classLoader.DefaultAssertionStatus=nonsense
- A Client Error response code was returned by the server [100000] total: 70:
- Storable and Cacheable Content [10049] total: 1:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com/switch2/pnotif

View the following link to download the report. RunnerID:10523585788

github-actions[bot] commented 2 weeks ago

Site: https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com/switch2/pnotif
- Permissions Policy Header Not Set [10063] total: 1:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com/switch2/pnotif
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 1:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com/switch2/pnotif
  Resolved Alerts
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:

View the following link to download the report. RunnerID:10553582379

github-actions[bot] commented 2 weeks ago

Site: https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com New Alerts
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com/switch2/pnotif
  Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- Permissions Policy Header Not Set [10063] total: 1:
- Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 1:

View the following link to download the report. RunnerID:10572035416

github-actions[bot] commented 1 week ago

Site: https://uat.jana.sb.tibilprojects.com New Alerts
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
  - https://uat.jana.sb.tibilprojects.com/switch2/pnotif
- Strict-Transport-Security Header Not Set [10035] total: 1:
  - https://uat.jana.sb.tibilprojects.com/switch2/pnotif
- Unexpected Content-Type was returned [100001] total: 2:
  - https://uat.jana.sb.tibilprojects.com?aaa=bbb
  - https://uat.jana.sb.tibilprojects.com?class.module.classLoader.DefaultAssertionStatus=nonsense
- A Client Error response code was returned by the server [100000] total: 70:
- Storable and Cacheable Content [10049] total: 1:
  - https://uat.jana.sb.tibilprojects.com/switch2/pnotif

View the following link to download the report. RunnerID:10664030522

github-actions[bot] commented 1 week ago

Site: https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com New Alerts
- A Client Error response code was returned by the server [100000] total: 10:
- Storable and Cacheable Content [10049] total: 1:
  - https://npdlqpxkb7.execute-api.ap-south-1.amazonaws.com/switch2/pnotif

View the following link to download the report. RunnerID:10678635125