New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ZAP API Scan Report #693

Open

github-actions bot opened this issue Oct 17, 2024 · 2 comments

github-actions bot commented Oct 17, 2024

Site: https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca
New Alerts
- A Server Error response code was returned by the server [100000] total: 1:
  - https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/?batchId=10&studentStatus=studentStatus&userName=userName
- Cookie with SameSite Attribute None [10054] total: 12:
- Unexpected Content-Type was returned [100001] total: 1:
  - https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/?batchId=10&studentStatus=studentStatus&userName=userName
- A Client Error response code was returned by the server [100000] total: 5600:
- Information Disclosure - Sensitive Information in URL [10024] total: 2:
  - https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/distribution/studentid/studentID?batchId=10&activityCode=activityCode&username=username
  - https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/distribution/batchid/10?userName=userName&activityCode=activityCode
- Non-Storable Content [10049] total: 13:
- Session Management Response Identified [10112] total: 12:

View the following link to download the report.
RunnerID:11393093916

ZAP is supported by the Crash Override Open Source Fellowship

Author

github-actions bot commented Nov 1, 2024

Site: https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs
- Permissions Policy Header Not Set [10063] total: 1:
  - https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs
- Strict-Transport-Security Header Not Set [10035] total: 1:
  - https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs
Resolved Alerts
- Cookie with SameSite Attribute None [10054] total: 12:
- Information Disclosure - Sensitive Information in URL [10024] total: 2:
- Session Management Response Identified [10112] total: 12:

View the following link to download the report.
RunnerID:11635791776

Author

github-actions bot commented Nov 4, 2024

Site: https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca
New Alerts
Resolved Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- Permissions Policy Header Not Set [10063] total: 1:
- Strict-Transport-Security Header Not Set [10035] total: 1:

View the following link to download the report.
RunnerID:11674217444

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment