Skip to content

Test gh actions - #1

Open
nirw wants to merge 15 commits into
masterfrom
test-gh-actions
Open

Test gh actions#1
nirw wants to merge 15 commits into
masterfrom
test-gh-actions

Conversation

@nirw

@nirw nirw commented Jan 6, 2022

Copy link
Copy Markdown

No description provided.

@nirw

nirw commented Jul 27, 2023 •
edited
Loading

Copy link
Copy Markdown
Author

Logo
Checkmarx One – Scan Summary & Details – 193849fd-74b7-47ad-8f5e-9351ff7be11c

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2022-4065 Maven-org.testng:testng-6.9.10 Vulnerable Package
HIGH CVE-2022-42920 Maven-org.apache.bcel:bcel-6.3 Vulnerable Package

Fixed Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 16 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 16 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 16 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 16 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 16 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 16 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/SubClass.java: 11 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 269 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 268 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/CommandInjection.java: 259 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/MoreMethods.java: 29 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/MoreMethods.java: 8 Attack Vector
HIGH Command_Injection /findsecbugs-samples-java/src/test/java/testcode/command/MoreMethods.java: 8 Attack Vector
HIGH LDAP_Injection /findsecbugs-samples-java/src/test/java/testcode/ldap/JndiLdapSpecial.java: 8 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet7.java: 28 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/benchmark/Benchmark00013.java: 25 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet2.java: 18 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet4.java: 18 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet3.java: 18 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet3.java: 18 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet5.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/portlets/XssIbmPortlet.java: 24 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/portlets/XssPortlet.java: 23 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet1.java: 15 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet1.java: 15 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/servlets/XssServlet1.java: 15 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsLang3.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsLang3.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsLang3.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsLang3.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsLang26.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsText.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsText.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsText.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/xss/encoder/ApacheCommonsText.java: 14 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-jsp/src/test/webapp/xss/xss_6_get_parameter.jsp: 4 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/cookie/UrlRewriting.java: 13 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/endpoint/BasicHttpServlet.java: 20 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-java/src/test/java/testcode/endpoint/BasicHttpServlet.java: 16 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-jsp/src/test/webapp/jstl/jstl_escape_3.jsp: 3 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-jsp/src/test/webapp/jstl/jstl_expression_insecure.jsp: 3 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-jsp/src/test/webapp/xsl/xsl2.jsp: 2 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-jsp/src/test/webapp/xsl/xsl1.jsp: 2 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-jsp/src/test/webapp/xml/xml1.jsp: 2 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-jsp/src/test/webapp/xsl/xsl1.jsp: 2 Attack Vector
HIGH Reflected_XSS_All_Clients /findsecbugs-samples-jsp/src/test/webapp/xsl/xsl3.jsp: 2 Attack Vector
HIGH SQL_Injection /findsecbugs-samples-java/src/test/java/testcode/taint/JaxRsAnnotatedController.java: 23 Attack Vector
HIGH Stored_XSS /findsecbugs-samples-java/src/test/java/testcode/taint/JaxRsAnnotatedController.java: 24 Attack Vector
HIGH XPath_Injection /findsecbugs-samples-java/src/test/java/testcode/xpath/XPathJavax.java: 10 Attack Vector
HIGH XPath_Injection /findsecbugs-samples-java/src/test/java/testcode/xpath/XPathJavax.java: 10 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Absolute_Path_Traversal /findsecbugs-samples-java/src/test/java/testcode/pathtraversal/PathTraversal.java: 15 Attack Vector
MEDIUM Hardcoded_password_in_Connection_String /findsecbugs-samples-java/src/test/java/testcode/password/JdbcDriverConnection.java: 10 Attack Vector
MEDIUM Hardcoded_password_in_Connection_String /findsecbugs-samples-java/src/test/java/testcode/password/ConstantPasswords.java: 120 Attack Vector
MEDIUM Hardcoded_password_in_Connection_String /findsecbugs-samples-java/src/test/java/testcode/password/ConstantPasswords.java: 35 Attack Vector
MEDIUM Hardcoded_password_in_Connection_String /findsecbugs-samples-java/src/test/java/testcode/password/JdbcDriverConnection.java: 13 Attack Vector
MEDIUM HttpOnlyCookies /findsecbugs-samples-java/src/test/java/testcode/juliet/CWE113_HTTP_Response_Splitting__File_addCookieServlet_12.java: 101 Attack Vector
MEDIUM HttpOnlyCookies /findsecbugs-samples-java/src/test/java/testcode/juliet/CWE113_HTTP_Response_Splitting__File_addCookieServlet_12.java: 91 Attack Vector
MEDIUM Improper_Restriction_of_Stored_XXE_Ref /findsecbugs-samples-java/src/test/java/testcode/graph/Application.java: 25 Attack Vector
MEDIUM Improper_Restriction_of_Stored_XXE_Ref

More results are available on AST platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nirw