Code Security Finding: Readline Denial of Service (CWE-400, Medium Severity) in EndlessWaitingServlet.java:128

[joshn-whitesource-app]

Code Security Finding

This finding was first detected on 2023-12-06 01:34pm GMT and is still present in the last scan performed on 2024-02-15 10:26pm GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
Medium	Readline Denial of Service	CWE-400	EndlessWaitingServlet.java:128	1
Vulnerable Code easybuggy/src/main/java/org/t246osslab/easybuggy/troubles/EndlessWaitingServlet.java Lines 123 to 128 in b9f2abf private String printInputStream(InputStream is) throws IOException { StringBuilder sb = new StringBuilder(); BufferedReader br = new BufferedReader(new InputStreamReader(is)); try { while (true) { String line = br.readLine(); 1 Data Flow/s detected Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Readline Denial of Service Training ● Videos 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk