CX Absolute_Path_Traversal @ src/main/webapp/vulnerability/idor/download.jsp [master]

[satyamchaurasiapersistent]

Absolute_Path_Traversal issue exists @ src/main/webapp/vulnerability/idor/download.jsp in branch master

Method request.getParameter at line 11 of src\main\webapp\vulnerability\idor\download.jsp gets dynamic data from the ""file"" element. This element’s value then flows through the code and is eventually used in a file path for local disk access in = at line 18 of src\main\webapp\vulnerability\idor\download.jsp. This may cause a Path Traversal vulnerability.

Severity: Medium

CWE:36

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 11

---

Code (Line #11):

            filePath = request.getParameter("file");

---

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.

[satyamchaurasiapersistent]

Issue still exists.