New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OWASP Baseline #1927

Open

github-actions bot opened this issue Aug 7, 2024 · 2 comments

github-actions bot commented Aug 7, 2024

Site: http://localhost:3004
New Alerts
- Absence of Anti-CSRF Tokens [10202] total: 2:
  - http://localhost:3004/
  - http://localhost:3004/
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - http://localhost:3004/
  - http://localhost:3004/sitemap.xml
- Cookie No HttpOnly Flag [10010] total: 11:
  - http://localhost:3004/
  - http://localhost:3004/_next/static/chunks/pages/404-40ecd0deb1fdb316.js
  - http://localhost:3004/_next/static/chunks/pages/index-495a8f059c80f210.js
  - http://localhost:3004/_next/static/chunks/webpack-2baf1d431169793d.js
  - http://localhost:3004/_next/static/css/e90bd523cb72f146.css
  - ..
- Cookie without SameSite Attribute [10054] total: 10:
  - http://localhost:3004/
  - http://localhost:3004/
  - http://localhost:3004/_next/static/css/e90bd523cb72f146.css
  - http://localhost:3004/icons/bcid-apple-icon.svg
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - ..
- Dangerous JS Functions [10110] total: 1:
  - http://localhost:3004/_next/static/chunks/pages/_app-7af1d1a3693e3c16.js
- Full Path Disclosure [110009] total: 2:
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Permissions Policy Header Not Set [10063] total: 11:
  - http://localhost:3004/
  - http://localhost:3004/_next/static/9eAhiqhHtqRiZyI2vQCJO/_ssgManifest.js
  - http://localhost:3004/_next/static/chunks/8360-a78c0d3265cb2303.js
  - http://localhost:3004/_next/static/chunks/framework-e51163eae4b843dc.js
  - http://localhost:3004/_next/static/chunks/main-2a7a8035c600c115.js
  - ..
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Timestamp Disclosure - Unix [10096] total: 4:
  - http://localhost:3004/_next/static/chunks/8360-a78c0d3265cb2303.js
  - http://localhost:3004/_next/static/chunks/main-2a7a8035c600c115.js
  - http://localhost:3004/_next/static/chunks/pages/_app-7af1d1a3693e3c16.js
  - http://localhost:3004/_next/static/chunks/pages/index-495a8f059c80f210.js
- Base64 Disclosure [10094] total: 7:
  - http://localhost:3004/
  - http://localhost:3004/
  - http://localhost:3004/_next/static/chunks/pages/_app-7af1d1a3693e3c16.js
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 14:
  - http://localhost:3004/
  - http://localhost:3004/_next/static/9eAhiqhHtqRiZyI2vQCJO/_buildManifest.js
  - http://localhost:3004/_next/static/chunks/8360-a78c0d3265cb2303.js
  - http://localhost:3004/_next/static/chunks/framework-e51163eae4b843dc.js
  - http://localhost:3004/_next/static/chunks/main-2a7a8035c600c115.js
  - ..
- Loosely Scoped Cookie [90033] total: 12:
  - http://localhost:3004/
  - http://localhost:3004/
  - http://localhost:3004/_next/static/chunks/pages/404-40ecd0deb1fdb316.js
  - http://localhost:3004/_next/static/chunks/pages/index-495a8f059c80f210.js
  - http://localhost:3004/_next/static/chunks/webpack-2baf1d431169793d.js
  - ..
- Modern Web Application [10109] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Non-Storable Content [10049] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Sec-Fetch-Dest Header is Missing [90005] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Sec-Fetch-Mode Header is Missing [90005] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Sec-Fetch-Site Header is Missing [90005] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Sec-Fetch-User Header is Missing [90005] total: 3:
  - http://localhost:3004/
  - http://localhost:3004/robots.txt
  - http://localhost:3004/sitemap.xml
- Session Management Response Identified [10112] total: 10:
  - http://localhost:3004/
  - http://localhost:3004/
  - http://localhost:3004/_next/static/css/e90bd523cb72f146.css
  - http://localhost:3004/icons/bcid-apple-icon.svg
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - ..
- Storable and Cacheable Content [10049] total: 4:
  - http://localhost:3004/_next/static/chunks/pages/404-40ecd0deb1fdb316.js
  - http://localhost:3004/_next/static/chunks/pages/index-495a8f059c80f210.js
  - http://localhost:3004/_next/static/chunks/webpack-2baf1d431169793d.js
  - http://localhost:3004/_next/static/css/e90bd523cb72f146.css
- Storable but Non-Cacheable Content [10049] total: 4:
  - http://localhost:3004/icons/bcid-apple-icon.svg
  - http://localhost:3004/icons/bcid-apple-touch-icon.png
  - http://localhost:3004/icons/bcid-favicon-16x16.png
  - http://localhost:3004/icons/bcid-favicon-32x32.png

View the following link to download the report.
RunnerID:10290409709

ZAP is supported by the Crash Override Open Source Fellowship

Author

github-actions bot commented Oct 31, 2024

Site: http://localhost:3004
Resolved Alerts
- Absence of Anti-CSRF Tokens [10202] total: 2:
- Dangerous JS Functions [10110] total: 1:

View the following link to download the report.
RunnerID:11621284860

Author

github-actions bot commented Dec 13, 2024

Site: http://localhost:3004
New Alerts
- Vulnerable JS Library [10003] total: 2:
  - http://localhost:3004/_next/static/chunks/framework-e51163eae4b843dc.js
  - http://localhost:3004/_next/static/chunks/pages/_app-bc53b000fce8636b.js

View the following link to download the report.
RunnerID:12321880554

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment