ZAP API Scan Report

- Site: [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/careerPrograms](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/careerPrograms)
- ..
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 5598:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentcareerprogram/careerProgramCode/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentcareerprogram/careerProgramCode/studentID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentcareerprogram/careerProgramCode/studentID/](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentcareerprogram/careerProgramCode/studentID/)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentid/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentid/studentID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentid/studentID/](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentid/studentID/)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentoptionalprogram/optionalProgramID/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentoptionalprogram/optionalProgramID/studentID)
- ..
- **Information Disclosure - Sensitive Information in URL** [10024] total: 1:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/distribution/batchid/10?userName=userName](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/distribution/batchid/10?userName=userName)
- **Non-Storable Content** [10049] total: 13:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/careerPrograms](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/careerPrograms)
- ..
- **Session Management Response Identified** [10112] total: 13:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentid/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentid/studentID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-STUDENT-API/actions/runs/8796239774) to download the report.
RunnerID:8796239774

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Download the ZAP report from GitHub Actions run 8796239774 and review the listed alerts and affected API URLs first. Identify the relevant Java API entry points, then confirm with maintainers which findings are actionable and what resolution or documentation counts as done, since the issue provides no acceptance criteria.

Written by the indexing model from the issue text.