ZAP Scan Baseline Report - Githubissues

rdytech / zap-scanner

Running the OWASP ZAP scanner against ReadyTech sites

MIT License

0 stars 1 forks source link

ZAP Scan Baseline Report #2

Open github-actions[bot] opened 1 year ago

github-actions[bot] commented 1 year ago

Site: https://cloud.zambion.com New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Vulnerable JS Library [10003] total: 1:
  - https://cloud.zambion.com/vendors~app~vendor.f52111f7a701b2ca7393.chunk.js
- Dangerous JS Functions [10110] total: 1:
  - https://cloud.zambion.com/vendors~app~vendor.f52111f7a701b2ca7393.chunk.js
- Permissions Policy Header Not Set [10063] total: 6:
- Strict-Transport-Security Header Not Set [10035] total: 10:
- Timestamp Disclosure - Unix [10096] total: 41:
- Information Disclosure - Suspicious Comments [10027] total: 4:
- Modern Web Application [10109] total: 2:
  - https://cloud.zambion.com
  - https://cloud.zambion.com/
- Non-Storable Content [10049] total: 4:
- Storable and Cacheable Content [10049] total: 6:

View the following link to download the report. RunnerID:4770226202

github-actions[bot] commented 1 year ago

Site: https://pentest.jobreadyplus.com New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 5:
- Sub Resource Integrity Attribute Missing [90003] total: 2:
  - https://pentest.jobreadyplus.com/saml
  - https://pentest.jobreadyplus.com/users/forgotten_password
- Vulnerable JS Library [10003] total: 5:
- Application Error Disclosure [90022] total: 1:
  - https://pentest.jobreadyplus.com/saml
- Cookie without SameSite Attribute [10054] total: 10:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 2:
  - https://pentest.jobreadyplus.com/saml
  - https://pentest.jobreadyplus.com/users/forgotten_password
- Dangerous JS Functions [10110] total: 4:
- Permissions Policy Header Not Set [10063] total: 11:
- Strict-Transport-Security Header Not Set [10035] total: 2:
  - https://pentest.jobreadyplus.com/favicon.ico
  - https://pentest.jobreadyplus.com/robots.txt
- X-Content-Type-Options Header Missing [10021] total: 12:
- Content Security Policy (CSP) Report-Only Header Found [10038] total: 5:
- Information Disclosure - Suspicious Comments [10027] total: 14:
- Modern Web Application [10109] total: 2:
  - https://pentest.jobreadyplus.com/saml
  - https://pentest.jobreadyplus.com/users/forgotten_password
- Non-Storable Content [10049] total: 6:
- Re-examine Cache-control Directives [10015] total: 1:
  - https://pentest.jobreadyplus.com/images/touch/manifest.json
- Storable and Cacheable Content [10049] total: 5:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 2:
  - https://pentest.jobreadyplus.com/user/signin
  - https://pentest.jobreadyplus.com/user/signin

View the following link to download the report. RunnerID:4777291136