ZAP API Scan Report

[github-actions]

• Site: http://localhost:5444
  New Alerts

  • A Server Error response code was returned by the server [100000] total: 80:
    • http://localhost:5444/computeMetadata/v1/
    • http://localhost:5444/latest/meta-data/
    • http://localhost:5444/metadata/instance
    • http://localhost:5444/metadata/v1
    • http://localhost:5444/opc/v1/instance/
    • ..
  • Application Error Disclosure [90022] total: 4:
    • http://localhost:5444/api/auth/oidc/provider/link?redirectUri=redirectUri&state=Oklahoma
    • http://localhost:5444/api/auth/oidc/provider/login?redirectUri=redirectUri&state=Oklahoma
    • http://localhost:5444/api/gamenight
    • http://localhost:5444/api/session
  • Cross Site Scripting Weakness (Persistent in JSON Response) [40014] total: 3:
    • http://localhost:5444/api/location
    • http://localhost:5444/api/player
    • http://localhost:5444/api/player
  • A Client Error response code was returned by the server [100000] total: 385:
    • http://localhost:5444/api/admin/oidc-providers/10
    • http://localhost:5444/api/admin/oidc-providers/10/
    • http://localhost:5444/api/admin/users/id
    • http://localhost:5444/api/admin/users/id/
    • http://localhost:5444/api/auth/external-logins/10
    • ..
  • Authentication Request Identified [10111] total: 1:
    • http://localhost:5444/api/auth/login
  • Information Disclosure - Sensitive Information in URL [10024] total: 1:
    • http://localhost:5444/api/game/bgg/import?username=username
  • Modern Web Application [10109] total: 1:
    • http://localhost:5444/api/gamenight/link/linkId
  • User Agent Fuzzer [10104] total: 5:
    • http://localhost:5444/api/admin/oidc-providers
    • http://localhost:5444/api/admin/oidc-providers
    • http://localhost:5444/api/auth/change-password
    • http://localhost:5444/api/auth/change-password
    • http://localhost:5444/api/auth/change-password

  Ignored Alerts

  • Unexpected Content-Type was returned [100001] total: 291:
  • Non-Storable Content [10049] total: 5:

View the following link to download the report.
RunnerID:26450056483

---

ZAP by Checkmarx

[github-actions]

• Site: http://localhost:5444
  New Alerts
  • Path Traversal [6] total: 1:
    • http://localhost:5444/api/location
  • CSP: style-src unsafe-inline [10055] total: 1:
    • http://localhost:5444/api/gamenight/link/linkId

View the following link to download the report.
RunnerID:26523738804

[github-actions]

• Site: http://localhost:5444
  Resolved Alerts
  • Path Traversal [6] total: 1:

View the following link to download the report.
RunnerID:26547163856

[github-actions]

• Site: http://localhost:5444
  New Alerts
  • Format String Error [30002] total: 1:
    • http://localhost:5444/api/game/bgg/import?username=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A

View the following link to download the report.
RunnerID:26603823975

[github-actions]

• Site: http://localhost:5444
  New Alerts

  • Path Traversal [6] total: 1:
    • http://localhost:5444/api/location

  Resolved Alerts

  • Format String Error [30002] total: 1:

View the following link to download the report.
RunnerID:26670316167