New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ZAP: API #205

Open

github-actions bot opened this issue Jan 31, 2024 · 11 comments

github-actions bot commented Jan 31, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
- Proxy Disclosure [40025] total: 14:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/robots.txt
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3
  - ..
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
- Dangerous JS Functions [10110] total: 1:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-bundle.js
- Permissions Policy Header Not Set [10063] total: 4:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-initializer.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-bundle.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-standalone-preset.js
- Strict-Transport-Security Header Not Set [10035] total: 11:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/robots.txt
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/favicon-16x16.png
  - ..
- Timestamp Disclosure - Unix [10096] total: 37:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-standalone-preset.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-standalone-preset.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-standalone-preset.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-standalone-preset.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-standalone-preset.js
  - ..
- X-Content-Type-Options Header Missing [10021] total: 9:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/robots.txt
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/favicon-16x16.png
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/favicon-32x32.png
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.css
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
  - ..
- Base64 Disclosure [10094] total: 3:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-bundle.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-standalone-preset.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui.css
- Cookie Slack Detector [90027] total: 14:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/robots.txt
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 2:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-bundle.js
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui-standalone-preset.js
- Modern Web Application [10109] total: 1:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
- Non-Storable Content [10049] total: 2:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
- Re-examine Cache-control Directives [10015] total: 2:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/robots.txt
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
- Sec-Fetch-Dest Header is Missing [90005] total: 4:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
- Sec-Fetch-Mode Header is Missing [90005] total: 4:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
- Sec-Fetch-Site Header is Missing [90005] total: 4:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
- Sec-Fetch-User Header is Missing [90005] total: 4:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/index.html
- Session Management Response Identified [10112] total: 3:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
- Storable and Cacheable Content [10049] total: 8:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/robots.txt
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/favicon-16x16.png
  - ..
- User Agent Fuzzer [10104] total: 24:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
  - ..

View the following link to download the report.
RunnerID:7719780939

DerekRoberts pinned this issue

Author

github-actions bot commented Feb 3, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
New Alerts
- Web Cache Deception [40039] total: 1:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca

View the following link to download the report.
RunnerID:7766478426

Author

github-actions bot commented Feb 10, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Web Cache Deception [40039] total: 1:

View the following link to download the report.
RunnerID:7854489900

Author

github-actions bot commented Feb 24, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
New Alerts
- Web Cache Deception [40039] total: 1:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca

View the following link to download the report.
RunnerID:8030142960

Author

github-actions bot commented Mar 2, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Web Cache Deception [40039] total: 1:

View the following link to download the report.
RunnerID:8122358723

Author

github-actions bot commented Mar 9, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
New Alerts
- Web Cache Deception [40039] total: 2:
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/
  - https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca/v3/swagger-ui/swagger-ui.css

View the following link to download the report.
RunnerID:8214112199

Author

github-actions bot commented Mar 16, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Web Cache Deception [40039] total: 2:

View the following link to download the report.
RunnerID:8307329322

Author

github-actions bot commented Mar 30, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Missing Anti-clickjacking Header [10020] total: 1:
- Proxy Disclosure [40025] total: 14:
- Cookie with SameSite Attribute None [10054] total: 2:
- Dangerous JS Functions [10110] total: 1:
- Timestamp Disclosure - Unix [10096] total: 38:
- X-Content-Type-Options Header Missing [10021] total: 9:
- Base64 Disclosure [10094] total: 3:
- Cookie Slack Detector [90027] total: 14:
- Information Disclosure - Suspicious Comments [10027] total: 2:
- Modern Web Application [10109] total: 1:
- Re-examine Cache-control Directives [10015] total: 2:
- Session Management Response Identified [10112] total: 3:
- User Agent Fuzzer [10104] total: 22:

View the following link to download the report.
RunnerID:8490344421

Author

github-actions bot commented Jun 1, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Permissions Policy Header Not Set [10063] total: 4:
- Non-Storable Content [10049] total: 4:
- Sec-Fetch-Dest Header is Missing [90005] total: 4:
- Sec-Fetch-Mode Header is Missing [90005] total: 4:
- Sec-Fetch-Site Header is Missing [90005] total: 4:
- Sec-Fetch-User Header is Missing [90005] total: 4:

View the following link to download the report.
RunnerID:9329776149

Author

github-actions bot commented Jun 8, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
New Alerts
- Permissions Policy Header Not Set [10063] total: 4:
- Non-Storable Content [10049] total: 4:
- Sec-Fetch-Dest Header is Missing [90005] total: 4:
- Sec-Fetch-Mode Header is Missing [90005] total: 4:
- Sec-Fetch-Site Header is Missing [90005] total: 4:
- Sec-Fetch-User Header is Missing [90005] total: 4:

View the following link to download the report.
RunnerID:9428263106

Author

github-actions bot commented Jun 22, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
Resolved Alerts
- Permissions Policy Header Not Set [10063] total: 4:
- Non-Storable Content [10049] total: 4:
- Sec-Fetch-Dest Header is Missing [90005] total: 4:
- Sec-Fetch-Mode Header is Missing [90005] total: 4:
- Sec-Fetch-Site Header is Missing [90005] total: 4:
- Sec-Fetch-User Header is Missing [90005] total: 4:

View the following link to download the report.
RunnerID:9624991081

Author

github-actions bot commented Jul 6, 2024

Site: https://nr-forest-client-api-test-backend.apps.silver.devops.gov.bc.ca
New Alerts
- Permissions Policy Header Not Set [10063] total: 4:
- Non-Storable Content [10049] total: 4:
- Sec-Fetch-Dest Header is Missing [90005] total: 4:
- Sec-Fetch-Mode Header is Missing [90005] total: 4:
- Sec-Fetch-Site Header is Missing [90005] total: 4:
- Sec-Fetch-User Header is Missing [90005] total: 4:

View the following link to download the report.
RunnerID:9818768219

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment