bcgov / bcgov/EDUC-GRAD-BUSINESS-API

ZAP API Scan Report

Open
#142 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
0
Forks
1
PR merge metrics
No merged PRs in 30d

Description

- Site: [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- ..
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 1406:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/amalgamated/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/amalgamated/schoolreport/mincode?type=type)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-BUSINESS-API/actions/runs/8794337208) to download the report.
RunnerID:8794337208

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the linked ZAP report from GitHub Actions run 8794337208 and review the listed findings and affected API endpoints. Determine which alerts require changes in this repository; done means the applicable findings are addressed and a subsequent scan verifies the result.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
api, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.