satyamchaurasiapersistent / JavaVulnerableLab

lab
0 stars 0 forks source link

CX Improper_Resource_Shutdown_or_Release @ src/main/webapp/vulnerability/idor/change-email.jsp [master] #85

Closed satyamchaurasiapersistent closed 2 years ago

satyamchaurasiapersistent commented 2 years ago

Improper_Resource_Shutdown_or_Release issue exists @ src/main/webapp/vulnerability/idor/change-email.jsp in branch master

The application's DBConnect method in src\main\webapp\vulnerability\idor\change-email.jsp defines and initializes the connect object at 25. This object encapsulates a limited computing resource, such as open file streams, database connections, or network streams. This resource is not properly closed and released in all situations.

Severity: Low

CWE:404

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 25


Code (Line #25):

 Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties"));

satyamchaurasiapersistent commented 2 years ago

Issue still exists.

satyamchaurasiapersistent commented 2 years ago

Issue still exists.

satyamchaurasiapersistent commented 2 years ago

Issue still exists.

satyamchaurasiapersistent commented 2 years ago

Issue still exists.