Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in VerboseErrorMessageServlet.java:51 #93

joshn-whitesource-app · 2024-02-15T15:23:19Z

Code Security Finding

This finding was first detected on 2023-12-06 01:34pm GMT and is still present in the last scan performed on 2024-02-15 10:26pm GMT:

Severity

Vulnerability Type

CWE

File

Data Flows

Medium

Trust Boundary Violation

CWE-501

VerboseErrorMessageServlet.java:51

1

Vulnerable Code

easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/VerboseErrorMessageServlet.java

Lines 46 to 51 in b9f2abf

    
           } else if (authUser(userid, password)) { 
        
               /* Reset account lock count */ 
        
               resetAccountLock(userid); 
        
               session.setAttribute("authNMsg", "authenticated"); 
        
               session.setAttribute("userid", userid);

1 Data Flow/s detected

🏴 Suppress Finding

... as False Alarm
... as Acceptable Risk

joshn-whitesource-app bot added the Mend: code security findings Code security findings detected by Mend label Feb 15, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in VerboseErrorMessageServlet.java:51 #93

Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in VerboseErrorMessageServlet.java:51 #93

joshn-whitesource-app bot commented Feb 15, 2024 •

edited

Loading

Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in VerboseErrorMessageServlet.java:51 #93

Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in VerboseErrorMessageServlet.java:51 #93

Comments

joshn-whitesource-app bot commented Feb 15, 2024 • edited Loading

Code Security Finding

joshn-whitesource-app bot commented Feb 15, 2024 •

edited

Loading