CX Relative_Path_Traversal @ src/main/webapp/vulnerability/idor/download.jsp [master]

[satyamchaurasiapersistent]

Relative_Path_Traversal issue exists @ src/main/webapp/vulnerability/idor/download.jsp in branch master

Method request.getParameter at line 11 of src\main\webapp\vulnerability\idor\download.jsp gets dynamic data from the ""file"" element. This element’s value then flows through the code and is eventually used in a file path for local disk access in File at line 13 of src\main\webapp\vulnerability\idor\download.jsp. This may cause a Path Traversal vulnerability.

Severity: Low

CWE:23

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 11

---

Code (Line #11):

            filePath = request.getParameter("file");

---

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.