ZAP API Scan Report

[github-actions[bot]]

• Site: https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com New Alerts
  • CSP: Wildcard Directive [10055] total: 1:
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com
  • Cross-Domain Misconfiguration [10098] total: 1:
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com
  • Strict-Transport-Security Header Not Set [10035] total: 1:
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com
  • Unexpected Content-Type was returned [100001] total: 57:
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com/
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com/._darcs
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com/.bzr
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com/.DS_Store
    • ..
  • A Client Error response code was returned by the server [100000] total: 58:
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com/
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com/._darcs
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com/.bzr
    • https://u4qoxwpvtk.execute-api.us-east-1.amazonaws.com/.DS_Store
    • ..

View the following link to download the report. RunnerID:9641140344

---

ZAP is supported by the Crash Override Open Source Fellowship

[github-actions[bot]]

• Site: https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com New Alerts
  • CSP: Wildcard Directive [10055] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Cross-Domain Misconfiguration [10098] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Permissions Policy Header Not Set [10063] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Strict-Transport-Security Header Not Set [10035] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Unexpected Content-Type was returned [100001] total: 23:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/.env
    • ..
  • A Client Error response code was returned by the server [100000] total: 73:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/._darcs
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/.bzr
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/.DS_Store
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/.env
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/.git/config
    • ..
  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Sec-Fetch-User Header is Missing [90005] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get
  • Storable and Cacheable Content [10049] total: 1:
    • https://bscytxzsc3.execute-api.ap-south-1.amazonaws.com/payments/summary/get

View the following link to download the report. RunnerID:9809404308