Issues

• SSRF @ Install.java

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#126 · Filter by author tyleragypt opened on Aug 10, 2022

• Plaintext_Storage_of_a_Password @ DBConnect.java

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#127 · Filter by author tyleragypt opened on Aug 10, 2022

• SQS Policy With Public Access @ /sqs.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#124 · Filter by author tyleragypt opened on Aug 10, 2022

• Add Instead of Copy @ /Dockerfile

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#125 · Filter by author tyleragypt opened on Aug 10, 2022

• S3 Bucket Without Versioning @ /s3.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#121 · Filter by author tyleragypt opened on Aug 10, 2022

• S3 Bucket Without Versioning @ /Unsecure_Storage_of_Encryption_Key.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#122 · Filter by author tyleragypt opened on Aug 10, 2022

• ALB Is Not Integrated With WAF @ /infrostructure.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#123 · Filter by author tyleragypt opened on Aug 10, 2022

• SQS Policy Allows All Actions @ /sqs.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#119 · Filter by author tyleragypt opened on Aug 10, 2022

• CSRF @ change-email.jsp

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#120 · Filter by author tyleragypt opened on Aug 10, 2022

• SQL Analysis Services Port 2383 (TCP) Is Publicly Accessible @ /AJP_Open_Port.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#116 · Filter by author tyleragypt opened on Aug 10, 2022

• CSRF @ forum.jsp

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#117 · Filter by author tyleragypt opened on Aug 10, 2022

• CSRF @ manageusers.jsp

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#118 · Filter by author tyleragypt opened on Aug 10, 2022

• Improper_Restriction_of_XXE_Ref @ xxe.java

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#114 · Filter by author tyleragypt opened on Aug 10, 2022

• CSRF @ adminlogin.jsp

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#115 · Filter by author tyleragypt opened on Aug 10, 2022

• CSRF @ change-info.jsp

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#111 · Filter by author tyleragypt opened on Aug 10, 2022

• HttpOnlyCookies @ adminlogin.jsp

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#112 · Filter by author tyleragypt opened on Aug 10, 2022

• Missing_HSTS_Header @ AddPage.jsp

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#113 · Filter by author tyleragypt opened on Aug 10, 2022

• CSRF @ LoginValidator.java

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#108 · Filter by author tyleragypt opened on Aug 10, 2022

• Unchecked_Input_for_Loop_Condition @ xxe.java

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#109 · Filter by author tyleragypt opened on Aug 10, 2022

• RDS With Backup Disabled @ /rds.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#110 · Filter by author tyleragypt opened on Aug 10, 2022

• Public Lambda via API Gateway @ /lambda.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#106 · Filter by author tyleragypt opened on Aug 10, 2022

• S3 Bucket Without Versioning @ /s3_with_all_permissions.tf

  branch:masterCheckmarxCxKICS
  tyleragypt/JavaVulnerableLab#107 · Filter by author tyleragypt opened on Aug 10, 2022

• CSRF @ SendMessage.java

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#103 · Filter by author tyleragypt opened on Aug 10, 2022

• Privacy_Violation @ LoginValidator.java

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#104 · Filter by author tyleragypt opened on Aug 10, 2022

• CSRF @ changepassword.jsp

  branch:masterCheckmarxCxSAST
  tyleragypt/JavaVulnerableLab#105 · Filter by author tyleragypt opened on Aug 10, 2022