Code Security Report: 10 total findings

[mend-for-github-com[bot]]

Code Security Report

Scan Metadata

Latest Scan: 2023-12-29 04:47am Total Findings: 10 | New Findings: 0 | Resolved Findings: 0 Tested Project Files: 1096 Detected Programming Languages: 2 (JavaScript / TypeScript, Java)

• [ ] Check this box to manually trigger a scan

Most Relevant Findings

The below list presents the 9 most relevant findings that need your attention. To view information on the remaining findings, navigate to the Mend Application.

Severity	Vulnerability Type	CWE	File	Data Flows	Date
Medium	Error Messages Information Exposure	[CWE-209](https://cwe.mitre.org/data/definitions/209.html)	[TextUnitWS.java:372](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/textunit/TextUnitWS.java#L372)	1	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/textunit/TextUnitWS.java#L372 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Error Messages Information Exposure Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/infoexposure/errordetails/java/vanilla) ● Videos    ▪ [Secure Code Warrior Error Messages Information Exposure Video](https://media.securecodewarrior.com/v2/module_184_error_details.mp4)
Medium	Error Messages Information Exposure	[CWE-209](https://cwe.mitre.org/data/definitions/209.html)	[RepositoryWS.java:139](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L139)	1	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L139 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Error Messages Information Exposure Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/infoexposure/errordetails/java/vanilla) ● Videos    ▪ [Secure Code Warrior Error Messages Information Exposure Video](https://media.securecodewarrior.com/v2/module_184_error_details.mp4)
Medium	Error Messages Information Exposure	[CWE-209](https://cwe.mitre.org/data/definitions/209.html)	[RepositoryWS.java:170](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L170)	1	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L170 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Error Messages Information Exposure Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/infoexposure/errordetails/java/vanilla) ● Videos    ▪ [Secure Code Warrior Error Messages Information Exposure Video](https://media.securecodewarrior.com/v2/module_184_error_details.mp4)
Medium	Error Messages Information Exposure	[CWE-209](https://cwe.mitre.org/data/definitions/209.html)	[RepositoryWS.java:226](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L226)	1	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L226 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Error Messages Information Exposure Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/infoexposure/errordetails/java/vanilla) ● Videos    ▪ [Secure Code Warrior Error Messages Information Exposure Video](https://media.securecodewarrior.com/v2/module_184_error_details.mp4)
Medium	Regex Denial of Service (ReDoS)	[CWE-400](https://cwe.mitre.org/data/definitions/400.html)	[LeveragingService.java:237](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L237)	1	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L232-L237 1 Data Flow/s detected https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/leveraging/LeveragingWS.java#L41 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/leveraging/LeveragingWS.java#L43 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L131 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L136 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L142 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L153 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/leveraging/CopyTmConfig.java#L67 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/leveraging/CopyTmConfig.java#L68 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L153 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L153 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L219 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L230 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L234 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/leveraging/LeveragingService.java#L237 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Regex Denial of Service (ReDoS) Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/dos/routing/java/vanilla) ● Videos
Low	Log Forging	[CWE-117](https://cwe.mitre.org/data/definitions/117.html)	[UserWS.java:70](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/security/UserWS.java#L70)	1	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/security/UserWS.java#L65-L70 1 Data Flow/s detected https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/security/UserWS.java#L66 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/security/UserWS.java#L70 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/security/user/User.java#L90 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/security/user/User.java#L91 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/security/UserWS.java#L70 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/security/UserWS.java#L70 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/security/UserWS.java#L70 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Log Forging Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/injection/log/java/vanilla) ● Videos    ▪ [Secure Code Warrior Log Forging Video](https://media.securecodewarrior.com/v2/module_153_log_forging.mp4) ● Further Reading    ▪ [OWASP Log Forging](https://owasp.org/www-community/attacks/Log_Injection)
Low	Log Forging	[CWE-117](https://cwe.mitre.org/data/definitions/117.html)	[RepositoryService.java:443](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L443)	2	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L438-L443 2 Data Flow/s detected View Data Flow 1 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L201 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L216 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L140 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L141 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L216 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L212 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L696 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L721 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L351 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L360 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L464 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L482 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L485 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L360 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L371 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L400 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L405 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L405 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L409 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L400 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L401 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L437 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L440 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L98 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L99 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L440 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L440 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L52 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L53 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L440 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L447 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L401 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L409 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L400 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L401 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L437 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L442 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L442 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L442 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L443 View Data Flow 2 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L119 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L131 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L140 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L141 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L131 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L125 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L223 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L233 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L351 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L360 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L464 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L482 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L485 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L360 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L371 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L400 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L405 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L405 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L409 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L400 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L401 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L437 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L440 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L98 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L99 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L440 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L440 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L52 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L53 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L440 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L447 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L401 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L409 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L400 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L401 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L437 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L442 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L442 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L442 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L443 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Log Forging Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/injection/log/java/vanilla) ● Videos    ▪ [Secure Code Warrior Log Forging Video](https://media.securecodewarrior.com/v2/module_153_log_forging.mp4) ● Further Reading    ▪ [OWASP Log Forging](https://owasp.org/www-community/attacks/Log_Injection)
Low	Log Forging	[CWE-117](https://cwe.mitre.org/data/definitions/117.html)	[RepositoryService.java:514](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L514)	2	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L509-L514 2 Data Flow/s detected View Data Flow 1 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L201 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L216 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L140 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L141 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L216 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L212 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L696 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L721 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L351 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L360 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L464 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L98 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L99 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L52 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L53 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L480 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L497 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L513 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L514 View Data Flow 2 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L119 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L131 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L140 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L141 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L131 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L125 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L223 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L233 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L351 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L360 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L464 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L98 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L99 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L52 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L53 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L480 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L497 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L513 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L514 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Log Forging Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/injection/log/java/vanilla) ● Videos    ▪ [Secure Code Warrior Log Forging Video](https://media.securecodewarrior.com/v2/module_153_log_forging.mp4) ● Further Reading    ▪ [OWASP Log Forging](https://owasp.org/www-community/attacks/Log_Injection)
Low	Log Forging	[CWE-117](https://cwe.mitre.org/data/definitions/117.html)	[RepositoryService.java:510](https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L510)	2	2023-12-29 04:49am
Vulnerable Code https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L505-L510 2 Data Flow/s detected View Data Flow 1 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L201 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L216 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L140 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L141 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L216 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L212 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L696 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L721 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L351 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L360 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L464 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L98 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L99 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L52 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L53 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L480 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L497 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L509 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L510 View Data Flow 2 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L119 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L131 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L140 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Repository.java#L141 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L131 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/rest/repository/RepositoryWS.java#L125 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L223 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L233 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L351 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L360 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L464 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L469 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L98 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/RepositoryLocale.java#L99 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L52 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/entity/Locale.java#L53 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L470 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L480 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L497 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L509 https://github.com/samqdemocorp-mend/box_mojito_lvp/blob/012e83ee9b10e35eced839f51b8019c57f33234b/webapp/src/main/java/com/box/l10n/mojito/service/repository/RepositoryService.java#L510 Secure Code Warrior Training Material ● Training    ▪ [Secure Code Warrior Log Forging Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/injection/log/java/vanilla) ● Videos    ▪ [Secure Code Warrior Log Forging Video](https://media.securecodewarrior.com/v2/module_153_log_forging.mp4) ● Further Reading    ▪ [OWASP Log Forging](https://owasp.org/www-community/attacks/Log_Injection)

Findings Overview

Severity	Vulnerability Type	CWE	Language	Count
Medium	Error Messages Information Exposure	CWE-209	Java*	4
Medium	Regex Denial of Service (ReDoS)	CWE-400	Java*	1
Low	Log Forging	CWE-117	Java*	5