bcgov / bcgov/PSP

ZAP Full Scan Report

Open
#300 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TSQL
Stars
7
Forks
27
Avg merge
3d 23h
Merged PRs (30d)
24

Description

- Site: [https://dev-pims.th.gov.bc.ca](https://dev-pims.th.gov.bc.ca)
**New Alerts**
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static](https://dev-pims.th.gov.bc.ca/static)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)** [10037] total: 11:
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- ..
- **Modern Web Application** [10109] total: 4:
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js)

View the [following link](https://github.com/bcgov/PSP/actions/runs/1284664998) to download the report.
RunnerID:1284664998

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the linked GitHub Actions ZAP report and the listed dev-pims.th.gov.bc.ca endpoints. Review each alert category and identify the application or deployment configuration responsible for the response; done means the reported findings are addressed or their disposition is documented and a new scan confirms the result.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.