[Apiiro] PII Involved in an API · High Risk

[apiiro-staging[bot]]

reg 30.1

Discovered on: Jan 24, 2024 09:57
Route: POST api/Registrations
Insights:

• Missing authorization - This API is missing authorization controls.
• Involves shiglibob - Involves the following shiglibob:
  my_shmiglibob
• Involves PII - Involves the following PII:
  email
  name
  password
• Involves sensitive data - Involves sensitive data 4 fields
• Has associated SAST findings - Found 1 finding in latest security scans

Introduced through: Controllers/RegistrationsController.cs
API Declaration: public IActionResult Post(RegistrationRequest registrationRequest)
API Framework: ASP.NET
Module: Controllers
Related data models:
(Module | Data model name | Sensitive data field | Type)

• Controllers | User | my_shmiglibob | shiglibob
• Controllers | User | email | PII
• Controllers | User | name | PII
• Controllers | User | password | PII

View in Apiiro