ZAP Scan Baseline Report

[github-actions]

• Site: http://34.78.107.234:5009
  New Alerts
  • CSP: script-src unsafe-inline [10055] total: 4:
    • http://34.78.107.234:5009/robots.txt
    • http://34.78.107.234:5009
    • http://34.78.107.234:5009/
    • http://34.78.107.234:5009/sitemap.xml
  • Timestamp Disclosure - Unix [10096] total: 6:
    • http://34.78.107.234:5009/static/node_modules/bootstrap/dist/css/bootstrap.min.css
    • http://34.78.107.234:5009/static/node_modules/bootstrap/dist/css/bootstrap.min.css
    • http://34.78.107.234:5009/static/node_modules/bootstrap/dist/css/bootstrap.min.css
    • http://34.78.107.234:5009/static/node_modules/bootstrap/dist/css/bootstrap.min.css
    • http://34.78.107.234:5009/opts
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 7:
    • http://34.78.107.234:5009/static/node_modules/jquery/dist/jquery.min.js
    • http://34.78.107.234:5009/static/js/spiderfoot.newscan.js
    • http://34.78.107.234:5009/static/node_modules/alertifyjs/build/alertify.min.js
    • http://34.78.107.234:5009/static/node_modules/tablesorter/dist/js/jquery.tablesorter.min.js
    • http://34.78.107.234:5009/static/node_modules/d3/d3.min.js
    • ..
  • CSP: Wildcard Directive [10055] total: 4:
    • http://34.78.107.234:5009/robots.txt
    • http://34.78.107.234:5009/sitemap.xml
    • http://34.78.107.234:5009/
    • http://34.78.107.234:5009
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://34.78.107.234:5009/opts
    • http://34.78.107.234:5009/newscan
  • CSP: style-src unsafe-inline [10055] total: 4:
    • http://34.78.107.234:5009/
    • http://34.78.107.234:5009
    • http://34.78.107.234:5009/sitemap.xml
    • http://34.78.107.234:5009/robots.txt
  • Modern Web Application [10109] total: 4:
    • http://34.78.107.234:5009/newscan
    • http://34.78.107.234:5009/static/node_modules/jquery/dist/jquery.min.js
    • http://34.78.107.234:5009/static/js/spiderfoot.js
    • http://34.78.107.234:5009/opts
  • Reverse Tabnabbing [10108] total: 10:
    • http://34.78.107.234:5009/sitemap.xml
    • http://34.78.107.234:5009/savesettings
    • http://34.78.107.234:5009/
    • http://34.78.107.234:5009/newscan
    • http://34.78.107.234:5009/startscan
    • ..
  • Application Error Disclosure [90022] total: 1:
    • http://34.78.107.234:5009/static/node_modules/tablesorter/dist/js/extras/jquery.tablesorter.pager.min.js

View the following link to download the report.
RunnerID:1269826716

[github-actions]

• Site: http://34.140.94.36:5009
  New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 2:
    • http://34.140.94.36:5009/opts
    • http://34.140.94.36:5009/newscan
  • Reverse Tabnabbing [10108] total: 7:
    • http://34.140.94.36:5009/startscan
    • http://34.140.94.36:5009/startscan
    • http://34.140.94.36:5009/robots.txt
    • http://34.140.94.36:5009/opts
    • http://34.140.94.36:5009/sitemap.xml
    • ..
  • Application Error Disclosure [90022] total: 1:
    • http://34.140.94.36:5009/savesettings
  • Modern Web Application [10109] total: 4:
    • http://34.140.94.36:5009/newscan
    • http://34.140.94.36:5009/static/js/spiderfoot.js
    • http://34.140.94.36:5009/opts
    • http://34.140.94.36:5009/static/node_modules/jquery/dist/jquery.min.js
  • CSP: script-src unsafe-inline [10055] total: 3:
    • http://34.140.94.36:5009/sitemap.xml
    • http://34.140.94.36:5009/
    • http://34.140.94.36:5009/robots.txt
  • Information Disclosure - Suspicious Comments [10027] total: 7:
    • http://34.140.94.36:5009/static/js/viz.js
    • http://34.140.94.36:5009/static/node_modules/alertifyjs/build/alertify.min.js
    • http://34.140.94.36:5009/static/js/spiderfoot.newscan.js
    • http://34.140.94.36:5009/static/js/spiderfoot.scanlist.js
    • http://34.140.94.36:5009/static/node_modules/d3/d3.min.js
    • ..
  • Timestamp Disclosure - Unix [10096] total: 7:
    • http://34.140.94.36:5009/opts
    • http://34.140.94.36:5009/static/node_modules/bootstrap/dist/css/bootstrap.min.css
    • http://34.140.94.36:5009/opts
    • http://34.140.94.36:5009/static/node_modules/bootstrap/dist/css/bootstrap.min.css
    • http://34.140.94.36:5009/static/node_modules/bootstrap/dist/css/bootstrap.min.css
    • ..
  • CSP: Wildcard Directive [10055] total: 3:
    • http://34.140.94.36:5009/
    • http://34.140.94.36:5009/sitemap.xml
    • http://34.140.94.36:5009/robots.txt
  • CSP: style-src unsafe-inline [10055] total: 3:
    • http://34.140.94.36:5009/sitemap.xml
    • http://34.140.94.36:5009/robots.txt
    • http://34.140.94.36:5009/
  • Application Error Disclosure [90022] total: 1:
    • http://34.140.94.36:5009/static/node_modules/tablesorter/dist/js/extras/jquery.tablesorter.pager.min.js

View the following link to download the report.
RunnerID:1271618817