satyamchaurasiapersistent / JavaVulnerableLab

lab
0 stars 0 forks source link

CX Relative_Path_Traversal @ src/AddPage.java [master] #150

Closed satyamchaurasiapersistent closed 1 year ago

satyamchaurasiapersistent commented 1 year ago

Relative_Path_Traversal issue exists @ src/AddPage.java in branch master

Method processRequest at line 39 of src\AddPage.java gets dynamic data from the ""filename"" element. This element’s value then flows through the code and is eventually used in a file path for local disk access in processRequest at line 45 of src\AddPage.java. This may cause a Path Traversal vulnerability. Similarity ID: 570101539

Severity: Low

CWE:23

Checkmarx

Training Recommended Fix

Lines: 39


Code (Line #39):

String fileName=request.getParameter("filename");