CX Relative_Path_Traversal @ src/main/webapp/vulnerability/sqli/download_id.jsp [master]

[satyamchaurasiapersistent]

Relative_Path_Traversal issue exists @ src/main/webapp/vulnerability/sqli/download_id.jsp in branch master

Method fileid=request.getParameter at line 18 of src\main\webapp\vulnerability\sqli\download_id.jsp gets dynamic data from the ""fileid"" element. This element’s value then flows through the code and is eventually used in a file path for local disk access in = at line 37 of src\main\webapp\vulnerability\sqli\download_id.jsp. This may cause a Path Traversal vulnerability.

Severity: Low

CWE:23

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 18

---

Code (Line #18):

    String fileid=request.getParameter("fileid");

---

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.