Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in AuthenticationFilter.java:57 #96

joshn-whitesource-app · 2024-02-15T15:23:30Z

Code Security Finding

This finding was first detected on 2023-12-06 01:34pm GMT and is still present in the last scan performed on 2024-02-15 10:26pm GMT:

Severity

Vulnerability Type

CWE

File

Data Flows

Medium

Trust Boundary Violation

CWE-501

AuthenticationFilter.java:57

1

Vulnerable Code

easybuggy/src/main/java/org/t246osslab/easybuggy/core/filters/AuthenticationFilter.java

Lines 52 to 57 in b9f2abf

    
           HttpSession session = request.getSession(false); 
        
           if (session == null || session.getAttribute("authNMsg") == null 
        
                   || !"authenticated".equals(session.getAttribute("authNMsg"))) { 
        
               /* Not authenticated yet */ 
        
               session = request.getSession(true); 
        
               session.setAttribute("target", target);

1 Data Flow/s detected

🏴 Suppress Finding

... as False Alarm
... as Acceptable Risk

joshn-whitesource-app bot added the Mend: code security findings Code security findings detected by Mend label Feb 15, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in AuthenticationFilter.java:57 #96

Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in AuthenticationFilter.java:57 #96

joshn-whitesource-app bot commented Feb 15, 2024 •

edited

Loading

Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in AuthenticationFilter.java:57 #96

Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in AuthenticationFilter.java:57 #96

Comments

joshn-whitesource-app bot commented Feb 15, 2024 • edited Loading

Code Security Finding

joshn-whitesource-app bot commented Feb 15, 2024 •

edited

Loading