Skip to content

add Dockerfile#5

Open
cx-sean-casey wants to merge 2 commits intomasterfrom
triage567
Open

add Dockerfile#5
cx-sean-casey wants to merge 2 commits intomasterfrom
triage567

Conversation

@cx-sean-casey
Copy link
Owner

@cx-sean-casey cx-sean-casey commented Feb 26, 2025

No description provided.

@cx-sean-casey
Copy link
Owner Author

cx-sean-casey commented Feb 26, 2025 •
edited
Loading

Logo
Checkmarx One – Scan Summary & Details – fbefc24f-f11a-459c-93da-14bbe78988d0

New Issues (1)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
LOW Unpinned Actions Full Length Commit SHA /main.yml: 29
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
Fixed Issues (1)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
LOW Unpinned Actions Full Length Commit SHA /main.yml: 28
Policy Management Violations (2)
Policy Name: test3

  • Rule Name: no highs
    Scanner: SAST
    Entity: Vulnerability
    Conditions(s): High > 1

    Severity Issue Source File / Package Checkmarx Insight
    HIGH HttpOnly_Cookie_Flag_Not_Set_In_Config /WebGoat/Web.config: 45
    detailsThe /WebGoat/Web.config application configuration file, at line 45, does not define sensitive application cookies with the "httpOnly" flag, which c...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/WebGoatCoins/ProductDetails.aspx: 19
    detailsThe method Checkmarx_Container embeds untrusted data in generated output with Write, at line 19 of /WebGoat/WebGoatCoins/ProductDetails.aspx. This ...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/WebGoatCoins/CustomerLogin.aspx: 9
    detailsThe method Checkmarx_Container embeds untrusted data in generated output with Write, at line 9 of /WebGoat/WebGoatCoins/CustomerLogin.aspx. This un...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/SQLInjectionDiscovery.aspx.cs: 27
    detailsThe method btnFind_Click embeds untrusted data in generated output with Text, at line 30 of /WebGoat/Content/SQLInjectionDiscovery.aspx.cs. This un...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/UploadPathManipulation.aspx.cs: 26
    detailsThe method btnUpload_Click embeds untrusted data in generated output with Text, at line 26 of /WebGoat/Content/UploadPathManipulation.aspx.cs. This...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/WebGoatCoins/Orders.aspx.cs: 114
    detailsThe method GridView1_RowDataBound embeds untrusted data in generated output with Text, at line 114 of /WebGoat/WebGoatCoins/Orders.aspx.cs. This un...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/HeaderInjection.aspx.cs: 33
    detailsThe method Page_Load embeds untrusted data in generated output with Text, at line 33 of /WebGoat/Content/HeaderInjection.aspx.cs. This untrusted da...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/ReflectedXSS.aspx.cs: 20
    detailsThe method LoadCity embeds untrusted data in generated output with Text, at line 26 of /WebGoat/Content/ReflectedXSS.aspx.cs. This untrusted data i...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/PathManipulation.aspx.cs: 33
    detailsThe method Page_Load embeds untrusted data in generated output with Text, at line 43 of /WebGoat/Content/PathManipulation.aspx.cs. This untrusted d...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/WebGoatCoins/Orders.aspx.cs: 62
    detailsThe method Page_Load embeds untrusted data in generated output with Text, at line 83 of /WebGoat/WebGoatCoins/Orders.aspx.cs. This untrusted data i...
    Attack Vector
    HIGH XPath_Injection /WebGoat/Content/XPathInjection.aspx.cs: 20
    detailsThe application's FindSalesPerson method constructs an XPath query, for navigating an XML document. The XPath query is created with BinaryExpr, at ...
    Attack Vector
Policy Name: No Highs Break Build The following violations of your team's AppSec policy rules were identified in this project. Since 'Break Build' is enabled for these rules, you must resolve these issues before the Pull Request can be merged.

  • Rule Name: no SAST Highs
    Scanner: SAST
    Entity: Vulnerability
    Conditions(s): High >= 1

    Severity Issue Source File / Package Checkmarx Insight
    HIGH HttpOnly_Cookie_Flag_Not_Set_In_Config /WebGoat/Web.config: 45
    detailsThe /WebGoat/Web.config application configuration file, at line 45, does not define sensitive application cookies with the "httpOnly" flag, which c...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/WebGoatCoins/ProductDetails.aspx: 19
    detailsThe method Checkmarx_Container embeds untrusted data in generated output with Write, at line 19 of /WebGoat/WebGoatCoins/ProductDetails.aspx. This ...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/WebGoatCoins/CustomerLogin.aspx: 9
    detailsThe method Checkmarx_Container embeds untrusted data in generated output with Write, at line 9 of /WebGoat/WebGoatCoins/CustomerLogin.aspx. This un...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/SQLInjectionDiscovery.aspx.cs: 27
    detailsThe method btnFind_Click embeds untrusted data in generated output with Text, at line 30 of /WebGoat/Content/SQLInjectionDiscovery.aspx.cs. This un...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/UploadPathManipulation.aspx.cs: 26
    detailsThe method btnUpload_Click embeds untrusted data in generated output with Text, at line 26 of /WebGoat/Content/UploadPathManipulation.aspx.cs. This...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/WebGoatCoins/Orders.aspx.cs: 114
    detailsThe method GridView1_RowDataBound embeds untrusted data in generated output with Text, at line 114 of /WebGoat/WebGoatCoins/Orders.aspx.cs. This un...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/HeaderInjection.aspx.cs: 33
    detailsThe method Page_Load embeds untrusted data in generated output with Text, at line 33 of /WebGoat/Content/HeaderInjection.aspx.cs. This untrusted da...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/ReflectedXSS.aspx.cs: 20
    detailsThe method LoadCity embeds untrusted data in generated output with Text, at line 26 of /WebGoat/Content/ReflectedXSS.aspx.cs. This untrusted data i...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/Content/PathManipulation.aspx.cs: 33
    detailsThe method Page_Load embeds untrusted data in generated output with Text, at line 43 of /WebGoat/Content/PathManipulation.aspx.cs. This untrusted d...
    Attack Vector
    HIGH Reflected_XSS /WebGoat/WebGoatCoins/Orders.aspx.cs: 62
    detailsThe method Page_Load embeds untrusted data in generated output with Text, at line 83 of /WebGoat/WebGoatCoins/Orders.aspx.cs. This untrusted data i...
    Attack Vector
    HIGH XPath_Injection /WebGoat/Content/XPathInjection.aspx.cs: 20
    detailsThe application's FindSalesPerson method constructs an XPath query, for navigating an XML document. The XPath query is created with BinaryExpr, at ...
    Attack Vector

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cx-sean-casey