ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • Modern Web Application [10109] total: 11:
    • https://www.zaproxy.org/download/
    • https://www.zaproxy.org/docs/
    • https://www.zaproxy.org/videos/
    • https://www.zaproxy.org/docs/api/
    • https://www.zaproxy.org/blog/
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 12:
    • https://www.zaproxy.org/main.71643.js
    • https://www.zaproxy.org/blog/2020-09-06-zap-is-ten-years-old/images/bugtraq-zap_hu437410bffd6b1d1fface0d715c7b996e_74983_300x300_fill_box_smart1_2.png
    • https://www.zaproxy.org/blog/2020-12-21-zap-2-10-0-the-10-year-anniversary-release/images/2-10-0-loading_hude3951311fb5feb2d4713b9b97d18b2b_121176_300x300_fill_box_smart1_2.png
    • https://www.zaproxy.org/main.71643.css
    • https://www.zaproxy.org/blog/2021-01-28-announcing-the-first-ever-zapcon/images/zapcon-social_huef03cec6befbbafbff1699740873af13_22792_300x300_fill_box_smart1_2.png
    • ..
  • Absence of Anti-CSRF Tokens [10202] total: 11:
    • https://www.zaproxy.org/docs/
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/community/
    • https://www.zaproxy.org/download/
    • https://www.zaproxy.org/robots.txt
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • https://www.zaproxy.org/robots.txt
    • https://www.zaproxy.org/blog/
    • https://www.zaproxy.org/docs/
    • https://www.zaproxy.org/community/
    • https://www.zaproxy.org/docs/api/
    • ..
  • Retrieved from Cache [10050] total: 12:
    • https://www.zaproxy.org/zap-in-ten/
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/blog/
    • https://www.zaproxy.org/docs/
    • https://www.zaproxy.org/docs/api/
    • ..
  • Private IP Disclosure [2] total: 8:
    • https://www.zaproxy.org/docs/alerts/index.xml
    • https://www.zaproxy.org/docs/docker/about/
    • https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
    • https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
    • https://www.zaproxy.org/index.xml
    • ..
  • Timestamp Disclosure - Unix [10096] total: 6:
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/docs/
    • https://www.zaproxy.org/videos/
    • https://www.zaproxy.org/blog/
    • ..
  • Application Error Disclosure [90022] total: 6:
    • https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
    • https://www.zaproxy.org/docs/desktop/start/features/custompages/
    • https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/
    • https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
    • https://www.zaproxy.org/search/index.json
    • ..
  • Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 11:
    • https://www.zaproxy.org/download/
    • https://www.zaproxy.org/zap-in-ten/
    • https://www.zaproxy.org/docs/
    • https://www.zaproxy.org/videos/
    • https://www.zaproxy.org/index.xml
    • ..
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 10:
    • https://www.zaproxy.org/docs/
    • https://www.zaproxy.org/blog/
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/robots.txt
    • https://www.zaproxy.org/docs/
    • ..
  • Information Disclosure - Debug Error Messages [10023] total: 5:
    • https://www.zaproxy.org/docs/desktop/start/features/custompages/
    • https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/
    • https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
    • https://www.zaproxy.org/docs/alerts/40008/
    • https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
  • Loosely Scoped Cookie [90033] total: 5:
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/
    • https://www.zaproxy.org/robots.txt
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/docs/desktop/addons/graphql-support/index.xml
  • Cross-Domain Misconfiguration [10098] total: 12:
    • https://www.zaproxy.org/blog/2020-12-21-zap-2-10-0-the-10-year-anniversary-release/images/2-10-0-loading_hude3951311fb5feb2d4713b9b97d18b2b_121176_300x300_fill_box_smart1_2.png
    • https://www.zaproxy.org/index.xml
    • https://www.zaproxy.org/sitemap.xml
    • https://www.zaproxy.org/blog/2021-01-28-announcing-the-first-ever-zapcon/images/zapcon-social_huef03cec6befbbafbff1699740873af13_22792_300x300_fill_box_smart1_2.png
    • https://www.zaproxy.org/main.71643.css
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 3:
    • https://www.zaproxy.org/search/?q=ZAP
    • https://www.zaproxy.org/faq/
    • https://www.zaproxy.org/main.71643.js
  • Cookie Without Secure Flag [10011] total: 4:
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/
    • https://www.zaproxy.org/robots.txt
    • https://www.zaproxy.org/docs/desktop/addons/graphql-support/index.xml
  • PII Disclosure [10062] total: 2:
    • https://www.zaproxy.org/search/index.json
    • https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
  • X-Content-Type-Options Header Missing [10021] total: 12:
    • https://www.zaproxy.org/blog/2020-09-06-zap-is-ten-years-old/images/bugtraq-zap_hu437410bffd6b1d1fface0d715c7b996e_74983_300x300_fill_box_smart1_2.png
    • https://www.zaproxy.org/img/favicon.ico
    • https://www.zaproxy.org/blog/2020-09-22-sites-tree-modifiers/images/sites_tree_mod_hu4d421c27c5855ef4ccbc0a9276c069f5_153921_300x300_fill_box_smart1_2.png
    • https://www.zaproxy.org/blog/2020-09-14-tags/images/contact_hidden_hu095de8eea6354702eed64d4d1c98a810_26836_300x300_fill_box_smart1_2.png
    • https://www.zaproxy.org/blog/index.xml
    • ..
  • Content-Type Header Missing [10019] total: 2:
    • https://www.zaproxy.org/docs/desktop/addons/graphql-support/index.xml
    • https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/

View the following link to download the report. RunnerID:524404889

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 4:
    • https://www.zaproxy.org/search/?q=ZAP
    • https://www.zaproxy.org/search/?q=ZAP
    • https://www.zaproxy.org/search/?q=ZAP
    • https://www.zaproxy.org/search/?q=ZAP

View the following link to download the report. RunnerID:532508247

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 4:

View the following link to download the report. RunnerID:641270086

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • Application Error Disclosure [90022] total: 6:
  • Information Disclosure - Debug Error Messages [10023] total: 5:
  • PII Disclosure [10062] total: 2:
  • Content-Type Header Missing [10019] total: 2:

View the following link to download the report. RunnerID:669754096

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • Application Error Disclosure [90022] total: 6:
    • https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
    • https://www.zaproxy.org/docs/desktop/start/features/custompages/
    • https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/
    • https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
    • https://www.zaproxy.org/search/index.json
    • ..
  • Information Disclosure - Debug Error Messages [10023] total: 5:
    • https://www.zaproxy.org/docs/desktop/start/features/custompages/
    • https://www.zaproxy.org/docs/desktop/ui/dialogs/session/contexts/
    • https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
    • https://www.zaproxy.org/docs/alerts/40008/
    • https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
  • PII Disclosure [10062] total: 2:
    • https://www.zaproxy.org/search/index.json
    • https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
  • Content-Type Header Missing [10019] total: 2:
    • https://www.zaproxy.org/docs/desktop/addons/graphql-support/index.xml
    • https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/

View the following link to download the report. RunnerID:672073548

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • Loosely Scoped Cookie [90033] total: 5:
  • Cookie Without Secure Flag [10011] total: 4:

View the following link to download the report. RunnerID:731496149

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • Loosely Scoped Cookie [90033] total: 5:
    • https://www.zaproxy.org/docs/desktop/addons/graphql-support/index.xml
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/
    • https://www.zaproxy.org/robots.txt
    • https://www.zaproxy.org/
  • Cookie Without Secure Flag [10011] total: 4:
    • https://www.zaproxy.org/
    • https://www.zaproxy.org/blog/2020-08-28-introducing-the-graphql-add-on-for-zap/
    • https://www.zaproxy.org/robots.txt
    • https://www.zaproxy.org/docs/desktop/addons/graphql-support/index.xml

View the following link to download the report. RunnerID:734856047

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • Loosely Scoped Cookie [90033] total: 5:
  • Cookie Without Secure Flag [10011] total: 4:

View the following link to download the report. RunnerID:830081804

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • CSP: style-src unsafe-inline [10055] total: 2:
    • https://www.zaproxy.org/docs/alerts/10043/
    • https://www.zaproxy.org/docs/alerts/10020-2/
  • CSP: Wildcard Directive [10055] total: 2:
    • https://www.zaproxy.org/docs/alerts/10043/
    • https://www.zaproxy.org/docs/alerts/10020-2/

View the following link to download the report. RunnerID:848226759

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • CSP: style-src unsafe-inline [10055] total: 2:
  • CSP: Wildcard Directive [10055] total: 2:

View the following link to download the report. RunnerID:851812625

[github-actions[bot]]

• Site: http://www.zaproxy.org

• Site: https://www.zaproxy.org

View the following link to download the report. RunnerID:984756842

[github-actions[bot]]

• Site: http://www.zaproxy.org

• Site: https://www.zaproxy.org New Alerts

  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 1:
    • https://www.zaproxy.org/search/index.json

View the following link to download the report. RunnerID:1196397773

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 1:

View the following link to download the report. RunnerID:1322463688

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 2:
    • https://www.zaproxy.org/search/index.json
    • https://www.zaproxy.org/search/index.json

View the following link to download the report. RunnerID:1324792942

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 2:

View the following link to download the report. RunnerID:1374449428

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 2:
    • https://www.zaproxy.org/search/index.json
    • https://www.zaproxy.org/search/index.json

View the following link to download the report. RunnerID:1376789986

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 2:

View the following link to download the report. RunnerID:1379200583

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 2:
    • https://www.zaproxy.org/search/index.json
    • https://www.zaproxy.org/search/index.json

View the following link to download the report. RunnerID:1383707919

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 2:

View the following link to download the report. RunnerID:1397153298

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 2:
    • https://www.zaproxy.org/search/index.json
    • https://www.zaproxy.org/search/index.json

View the following link to download the report. RunnerID:1403643504

[github-actions[bot]]

• Site: https://www.zaproxy.org Resolved Alerts
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 2:

View the following link to download the report. RunnerID:1419481326

[github-actions[bot]]

• Site: https://www.zaproxy.org New Alerts
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 8:
    • https://www.zaproxy.org/search/?q=ZAP
    • https://www.zaproxy.org/search/?q=ZAP
    • https://www.zaproxy.org/search/?q=ZAP
    • https://www.zaproxy.org/search/?q=ZAP
    • https://www.zaproxy.org/search/?q=ZAP
    • ..

View the following link to download the report. RunnerID:1609472337