CX Input_Path_Not_Canonicalized @ src/AddPage.java [master]

[satyamchaurasiapersistent]

Input_Path_Not_Canonicalized issue exists @ src/AddPage.java in branch master

Method processRequest at line 39 of src\AddPage.java gets dynamic data from the ""filename"" element. This element’s value then flows through the code and is eventually used in a file path for local disk access in processRequest at line 45 of src\AddPage.java. This may cause a Path Traversal vulnerability. Similarity ID: 570160997

Severity: Medium

CWE:73

Checkmarx

Training Recommended Fix

Lines: 39

---

Code (Line #39):

String fileName=request.getParameter("filename");

---

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.