Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Code Security Finding: Error Messages Information Exposure (CWE-209, Medium Severity) in AbstractServlet.java:94 #92

Open
2 tasks
joshn-whitesource-app bot opened this issue Feb 15, 2024 · 0 comments
Open
2 tasks

Code Security Finding: Error Messages Information Exposure (CWE-209, Medium Severity) in AbstractServlet.java:94 #92

joshn-whitesource-app bot opened this issue Feb 15, 2024 · 0 comments
Labels
Mend: code security findings Code security findings detected by Mend

Comments

@joshn-whitesource-app
Copy link
Contributor

joshn-whitesource-app bot commented Feb 15, 2024 •
edited
Loading

Code Security Finding

This finding was first detected on 2023-12-06 01:34pm GMT and is still present in the last scan performed on 2024-02-15 10:26pm GMT:

SeverityVulnerability TypeCWEFileData Flows
MediumError Messages Information Exposure

CWE-209

AbstractServlet.java:94

12
Vulnerable Code

easybuggy/src/main/java/org/t246osslab/easybuggy/core/servlets/AbstractServlet.java

Line 94 in b9f2abf

writer.write(htmlBody);

Secure Code Warrior Training Material

● Training

   ▪ Secure Code Warrior Error Messages Information Exposure Training

● Videos

   ▪ Secure Code Warrior Error Messages Information Exposure Video

🏴 Suppress Finding
  • ... as False Alarm
  • ... as Acceptable Risk
@joshn-whitesource-app joshn-whitesource-app bot added the Mend: code security findings Code security findings detected by Mend label Feb 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Mend: code security findings Code security findings detected by Mend
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
0 participants