Code Security Report: 24 high severity findings, 132 total findings

Code Security Report

Scan Metadata

Latest Scan: 2023-09-19 03:20pm
Total Findings: 132 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 427
Detected Programming Languages: 2 (JavaScript / Node.js, Java)

Check this box to manually trigger a scan

Most Relevant Findings

The below list presents the 10 most relevant findings that need your attention. To view information on the remaining findings, navigate to the Mend Application.

Severity

Vulnerability Type

CWE

File

Data Flows

Date

High

SQL Injection

CWE-89

SqlInjectionLesson10.java:71

1

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson10.java

Lines 66 to 71 in 81dd08f

    
           try (Connection connection = dataSource.getConnection()) { 
        
             try { 
        
               Statement statement = 
        
                   connection.createStatement( 
        
                       ResultSet.TYPE_SCROLL_INSENSITIVE, ResultSet.CONCUR_READ_ONLY); 
        
               ResultSet results = statement.executeQuery(query);

1 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson10.java

Line 59 in 81dd08f

return injectableQueryAvailability(action_string);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson10.java

Line 59 in 81dd08f

return injectableQueryAvailability(action_string);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson10.java

Line 62 in 81dd08f

protected AttackResult injectableQueryAvailability(String action) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson10.java

Line 64 in 81dd08f

String query = "SELECT * FROM access_log WHERE action LIKE '%" + action + "%'";

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson10.java

Line 71 in 81dd08f

ResultSet results = statement.executeQuery(query);

High

SQL Injection

CWE-89

SqlInjectionLesson6a.java:71

3

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Lines 66 to 71 in 81dd08f

    
           query = "SELECT * FROM user_data WHERE last_name = '" + accountName + "'"; 
        
           // Check if Union is used 
        
           if (!accountName.matches("(?i)(^[^-/*;)]*)(\\s*)UNION(.*$)")) { 
        
             usedUnion = false; 
        
           } 
        
           try (Statement statement =

3 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 57 in 81dd08f

return injectableQuery(userId);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 57 in 81dd08f

return injectableQuery(userId);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 62 in 81dd08f

public AttackResult injectableQuery(String accountName) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 66 in 81dd08f

query = "SELECT * FROM user_data WHERE last_name = '" + accountName + "'";

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 71 in 81dd08f

try (Statement statement =

View Data Flow 2

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/mitigation/SqlOnlyInputValidation.java

Line 51 in 81dd08f

AttackResult attackResult = lesson6a.injectableQuery(userId);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/mitigation/SqlOnlyInputValidation.java

Line 51 in 81dd08f

AttackResult attackResult = lesson6a.injectableQuery(userId);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 62 in 81dd08f

public AttackResult injectableQuery(String accountName) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 66 in 81dd08f

query = "SELECT * FROM user_data WHERE last_name = '" + accountName + "'";

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 71 in 81dd08f

try (Statement statement =

View Data Flow 3

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/mitigation/SqlOnlyInputValidationOnKeywords.java

Line 57 in 81dd08f

AttackResult attackResult = lesson6a.injectableQuery(userId);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/mitigation/SqlOnlyInputValidationOnKeywords.java

Line 57 in 81dd08f

AttackResult attackResult = lesson6a.injectableQuery(userId);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 62 in 81dd08f

public AttackResult injectableQuery(String accountName) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 66 in 81dd08f

query = "SELECT * FROM user_data WHERE last_name = '" + accountName + "'";

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionLesson6a.java

Line 71 in 81dd08f

try (Statement statement =

High

SQL Injection

CWE-89

Servers.java:71

1

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/mitigation/Servers.java

Lines 66 to 71 in 81dd08f

    
           @ResponseBody 
        
           public List<Server> sort(@RequestParam String column) throws Exception { 
        
             List<Server> servers = new ArrayList<>(); 
        
             try (var connection = dataSource.getConnection()) { 
        
               try (var statement =

1 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/mitigation/Servers.java

Line 71 in 81dd08f

try (var statement =

High

SQL Injection

CWE-89

Assignment5.java:58

2

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/challenges/challenge5/Assignment5.java

Lines 53 to 58 in 81dd08f

    
           } 
        
           if (!"Larry".equals(username_login)) { 
        
             return failed(this).feedback("user.not.larry").feedbackArgs(username_login).build(); 
        
           } 
        
           try (var connection = dataSource.getConnection()) { 
        
             PreparedStatement statement =

2 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/challenges/challenge5/Assignment5.java

Line 58 in 81dd08f

PreparedStatement statement =

View Data Flow 2

webgoat/src/main/java/org/owasp/webgoat/lessons/challenges/challenge5/Assignment5.java

Line 58 in 81dd08f

PreparedStatement statement =

High

SQL Injection

CWE-89

SqlInjectionLesson5b.java:64

1

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5b.java

Lines 59 to 64 in 81dd08f

    
           } 
        
           protected AttackResult injectableQuery(String login_count, String accountName) { 
        
             String queryString = "SELECT * From user_data WHERE Login_Count = ? and userid= " + accountName; 
        
             try (Connection connection = dataSource.getConnection()) { 
        
               PreparedStatement query =

1 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5b.java

Line 58 in 81dd08f

return injectableQuery(login_count, userid);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5b.java

Line 58 in 81dd08f

return injectableQuery(login_count, userid);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5b.java

Line 61 in 81dd08f

    
           protected AttackResult injectableQuery(String login_count, String accountName) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5b.java

Line 62 in 81dd08f

    
           String queryString = "SELECT * From user_data WHERE Login_Count = ? and userid= " + accountName;

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5b.java

Line 64 in 81dd08f

PreparedStatement query =

High

SQL Injection

CWE-89

SqlInjectionLesson5a.java:64

3

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Lines 59 to 64 in 81dd08f

    
           protected AttackResult injectableQuery(String accountName) { 
        
             String query = ""; 
        
             try (Connection connection = dataSource.getConnection()) { 
        
               query = 
        
                   "SELECT * FROM user_data WHERE first_name = 'John' and last_name = '" + accountName + "'"; 
        
               try (Statement statement =

3 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 56 in 81dd08f

return injectableQuery(account + " " + operator + " " + injection);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 56 in 81dd08f

return injectableQuery(account + " " + operator + " " + injection);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 59 in 81dd08f

protected AttackResult injectableQuery(String accountName) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 62 in 81dd08f

query =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 64 in 81dd08f

try (Statement statement =

View Data Flow 2

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 56 in 81dd08f

return injectableQuery(account + " " + operator + " " + injection);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 56 in 81dd08f

return injectableQuery(account + " " + operator + " " + injection);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 59 in 81dd08f

protected AttackResult injectableQuery(String accountName) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 62 in 81dd08f

query =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 64 in 81dd08f

try (Statement statement =

View Data Flow 3

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 56 in 81dd08f

return injectableQuery(account + " " + operator + " " + injection);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 56 in 81dd08f

return injectableQuery(account + " " + operator + " " + injection);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 59 in 81dd08f

protected AttackResult injectableQuery(String accountName) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 62 in 81dd08f

query =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson5a.java

Line 64 in 81dd08f

try (Statement statement =

High

SQL Injection

CWE-89

SqlInjectionLesson2.java:65

2

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson2.java

Lines 60 to 65 in 81dd08f

    
           } 
        
           protected AttackResult injectableQuery(String query) { 
        
             try (var connection = dataSource.getConnection()) { 
        
               Statement statement = connection.createStatement(TYPE_SCROLL_INSENSITIVE, CONCUR_READ_ONLY); 
        
               ResultSet results = statement.executeQuery(query);

2 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson2.java

Line 65 in 81dd08f

ResultSet results = statement.executeQuery(query);

View Data Flow 2

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson2.java

Line 59 in 81dd08f

return injectableQuery(query);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson2.java

Line 59 in 81dd08f

return injectableQuery(query);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson2.java

Line 62 in 81dd08f

protected AttackResult injectableQuery(String query) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson2.java

Line 65 in 81dd08f

ResultSet results = statement.executeQuery(query);

High

SQL Injection

CWE-89

SqlInjectionLesson4.java:60

2

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson4.java

Lines 55 to 60 in 81dd08f

    
             return injectableQuery(query); 
        
           } 
        
           protected AttackResult injectableQuery(String query) { 
        
             try (Connection connection = dataSource.getConnection()) { 
        
               try (Statement statement =

2 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson4.java

Line 60 in 81dd08f

try (Statement statement =

View Data Flow 2

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson4.java

Line 55 in 81dd08f

return injectableQuery(query);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson4.java

Line 55 in 81dd08f

return injectableQuery(query);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson4.java

Line 58 in 81dd08f

protected AttackResult injectableQuery(String query) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson4.java

Line 60 in 81dd08f

try (Statement statement =

High

SQL Injection

CWE-89

SqlInjectionChallenge.java:69

1

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionChallenge.java

Lines 64 to 69 in 81dd08f

    
           try (Connection connection = dataSource.getConnection()) { 
        
             String checkUserQuery = 
        
                 "select userid from sql_challenge_users where userid = '" + username_reg + "'"; 
        
             Statement statement = connection.createStatement(); 
        
             ResultSet resultSet = statement.executeQuery(checkUserQuery);

1 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionChallenge.java

Line 66 in 81dd08f

String checkUserQuery =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionChallenge.java

Line 66 in 81dd08f

String checkUserQuery =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/advanced/SqlInjectionChallenge.java

Line 69 in 81dd08f

ResultSet resultSet = statement.executeQuery(checkUserQuery);

High

SQL Injection

CWE-89

SqlInjectionLesson9.java:76

4

2023-09-19 03:21pm

Vulnerable Code

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Lines 71 to 76 in 81dd08f

    
                   + "'"; 
        
           try (Connection connection = dataSource.getConnection()) { 
        
             try { 
        
               Statement statement = connection.createStatement(TYPE_SCROLL_SENSITIVE, CONCUR_UPDATABLE); 
        
               SqlInjectionLesson8.log(connection, query); 
        
               ResultSet results = statement.executeQuery(query);

4 Data Flow/s detected

View Data Flow 1

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 66 in 81dd08f

String query =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 66 in 81dd08f

String query =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 76 in 81dd08f

ResultSet results = statement.executeQuery(query);

View Data Flow 2

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 66 in 81dd08f

String query =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 66 in 81dd08f

String query =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 76 in 81dd08f

ResultSet results = statement.executeQuery(query);

View Data Flow 3

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 61 in 81dd08f

return injectableQueryIntegrity(name, auth_tan);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 61 in 81dd08f

return injectableQueryIntegrity(name, auth_tan);

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 64 in 81dd08f

protected AttackResult injectableQueryIntegrity(String name, String auth_tan) {

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 66 in 81dd08f

String query =

webgoat/src/main/java/org/owasp/webgoat/lessons/sqlinjection/introduction/SqlInjectionLesson9.java

Line 76 in 81dd08f

ResultSet results = statement.executeQuery(query);

View more Data Flows

Findings Overview

Severity	Vulnerability Type	CWE	Language	Count
High	Deserialization of Untrusted Data	CWE-502	Java	1
High	SQL Injection	CWE-89	Java	12
High	Cross-Site Scripting	CWE-79	Java	3
High	Path/Directory Traversal	CWE-22	Java	5
High	Server Side Request Forgery	CWE-918	Java	2
High	DOM Based Cross-Site Scripting	CWE-79	JavaScript / Node.js	1
Medium	Weak Pseudo-Random	CWE-338	JavaScript / Node.js	2
Medium	Console Output	CWE-209	Java	2
Medium	Error Messages Information Exposure	CWE-209	Java	46
Medium	Weak Pseudo-Random	CWE-338	Java	10
Medium	Heap Inspection	CWE-244	Java	32
Medium	Hardcoded Password/Credentials	CWE-798	Java	10
Medium	XML External Entity (XXE) Injection	CWE-611	Java	1
Medium	Miscellaneous Dangerous Functions	CWE-676	Java	2
Low	Cookie Injection	CWE-20	Java	2
Low	Weak Hash Strength	CWE-916	Java	1

Navigation Menu

Repository navigation

Code Security Report: 24 high severity findings, 132 total findings #18

Code Security Report

Scan Metadata

Most Relevant Findings

Findings Overview

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Code Security Report: 24 high severity findings, 132 total findings #18

Description

Code Security Report

Scan Metadata

Most Relevant Findings

Findings Overview

Activity

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions