ZAP API Scan Report

- Site: [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/?batchId=10&studentStatus=studentStatus&userName=userName](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/?batchId=10&studentStatus=studentStatus&userName=userName)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentid/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentid/studentID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student)
- ..
- **Unexpected Content-Type was returned** [100001] total: 1:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/?batchId=10&studentStatus=studentStatus&userName=userName](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/?batchId=10&studentStatus=studentStatus&userName=userName)
- **A Client Error response code was returned by the server** [100000] total: 5600:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentcareerprogram/careerProgramCode/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentcareerprogram/careerProgramCode/studentID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentcareerprogram/careerProgramCode/studentID/](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentcareerprogram/careerProgramCode/studentID/)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentid/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentid/studentID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentid/studentID/](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentid/studentID/)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentoptionalprogram/optionalProgramID/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/conv/studentoptionalprogram/optionalProgramID/studentID)
- ..
- **Information Disclosure - Sensitive Information in URL** [10024] total: 2:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/distribution/studentid/studentID?batchId=10&activityCode=activityCode&username=username](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/distribution/studentid/studentID?batchId=10&activityCode=activityCode&username=username)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/distribution/batchid/10?userName=userName&activityCode=activityCode](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/distribution/batchid/10?userName=userName&activityCode=activityCode)
- **Non-Storable Content** [10049] total: 13:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentid/studentID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentid/studentID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/optionalPrograms/optionalProgramID)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentstatus)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student)
- [https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/careerPrograms](https://educ-grad-student-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/studentID/careerPrograms)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-STUDENT-API/actions/runs/11393093916) to download the report.
RunnerID:11393093916

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Start by downloading the ZAP report from the linked GitHub Actions run and review the listed API endpoints and alert categories. Trace the affected endpoint implementations and response configuration, then rerun the ZAP scan to confirm the reported findings are addressed.

Written by the indexing model from the issue text.