wwesleyalves / bodgeit

0 stars 0 forks source link

CX Heap_Inspection @ root/register.jsp [main] #66

Open wwesleyalves opened 1 year ago

wwesleyalves commented 1 year ago

Heap_Inspection issue exists @ root/register.jsp in branch main

*Method password1 at line 7 of root\register.jsp defines password1, which is designated to contain user passwords. However, while plaintext passwords are later assigned to password1, this variable is never cleared from memory.Similarity ID: -1472468258

Method password2 at line 8 of root\register.jsp defines password2, which is designated to contain user passwords. However, while plaintext passwords are later assigned to password2, this variable is never cleared from memory.Similarity ID: -2001148194*

Severity: Low

CWE:244

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 7 8


Code (Line #7):

String password1 = (String) request.getParameter("password1");

Code (Line #8):

String password2 = (String) request.getParameter("password2");

wwesleyalves commented 1 year ago

Issue still exists.