ZAP API Scan Report

- Site: [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated/distinct/students?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated/distinct/students?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/sex-codes](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/sex-codes)
- ..
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **A Client Error response code was returned by the server** [100000] total: 2428:
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id/](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id/)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated/distinct/students?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated/distinct/students?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/sex-codes](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/sex-codes)
- ..
- **Session Management Response Identified** [10112] total: 13:
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/id)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history-activity-codes](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history-activity-codes)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated/distinct/students?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated/distinct/students?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/history/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- [https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList](https://student-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/student/paginated?pageNumber=0&pageSize=10&sort=sort&searchCriteriaList=searchCriteriaList)
- ..

View the [following link](https://github.com/bcgov/EDUC-STUDENT-API/actions/runs/8621944743) to download the report.
RunnerID:8621944743

Start with the ZAP report linked from issue #146 and the GitHub Actions run 8621944743. Review the listed API endpoints and alert categories, then determine which findings are actionable for this service. Done means the relevant alerts are addressed and a follow-up ZAP API scan confirms the results.

Written by the indexing model from the issue text.