CX Side_Channel_Data_Leakage @ src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java [master]

[santhoshr06]

Side_Channel_Data_Leakage issue exists @ src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java in branch master

Method processRequest at line 36 of src\main\java\org\cysecurity\cspf\jvl\controller\XPathQuery.java gets private data from element pass . This element’s value flows through the code and is sent or written outside of the device or to external media or to a log file in processRequest at line 54 of src\main\java\org\cysecurity\cspf\jvl\controller\XPathQuery.java. This constitutes Side Channel Data Leakage.

Severity: High

CWE:359

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 36

---

Code (Line #36):

            String pass=request.getParameter("password");

---

[santhoshr06]

Issue still exists.

[santhoshr06]

Issue still exists.