bcgov / bcgov/PSP

ZAP Full Scan Report

Closed
#316 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TSQL
Stars
7
Forks
27
Avg merge
3d 23h
Merged PRs (30d)
24

Description

- Site: [https://dev-pims.th.gov.bc.ca](https://dev-pims.th.gov.bc.ca)
**New Alerts**
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.90736bf2.js)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static](https://dev-pims.th.gov.bc.ca/static)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- ..
- **Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)** [10037] total: 11:
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- ..
- **Modern Web Application** [10109] total: 4:
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.44bba82b.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.64c9f6df.chunk.js)

View the [following link](https://github.com/bcgov/PSP/actions/runs/1292463650) to download the report.
RunnerID:1292463650

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the ZAP report linked from GitHub Actions run 1292463650 and review the listed deployed URLs, including the JavaScript bundles, sitemap.xml, robots.txt, and manifest.json. Done means the reported alerts have been investigated and the resulting findings are resolved or explicitly documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, sql
Domain
security, web-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.