satyamchaurasiapersistent / JavaVulnerableLab

lab
0 stars 0 forks source link

CX Improper_Resource_Shutdown_or_Release @ src/main/java/org/cysecurity/cspf/jvl/controller/SendMessage.java [master] #99

Closed satyamchaurasiapersistent closed 2 years ago

satyamchaurasiapersistent commented 2 years ago

Improper_Resource_Shutdown_or_Release issue exists @ src/main/java/org/cysecurity/cspf/jvl/controller/SendMessage.java in branch master

The application's processRequest method in src\main\java\org\cysecurity\cspf\jvl\controller\SendMessage.java defines and initializes the connect object at 41. This object encapsulates a limited computing resource, such as open file streams, database connections, or network streams. This resource is not properly closed and released in all situations.

Severity: Low

CWE:404

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 41


Code (Line #41):

                 Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties"));

satyamchaurasiapersistent commented 2 years ago

Issue still exists.