ZAP Scan Baseline Report #63

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

github-actions bot opened this issue Dec 10, 2024 · 2 comments

github-actions bot commented Dec 10, 2024

Site: https://owasp.org
New Alerts
- PII Disclosure [10062] total: 4:
  - https://owasp.org/www-chapter-coimbatore/
  - https://owasp.org/www-chapter-warwick/
  - https://owasp.org/www-community/initiatives/gsoc/gsoc2022ideas
  - https://owasp.org/www-project-ai-security-and-privacy-guide/
- Application Error Disclosure [90022] total: 1:
  - https://owasp.org/www-community/Improper_Error_Handling
- CSP: Wildcard Directive [10055] total: 3:
  - https://owasp.org/
  - https://owasp.org/www-project-juice-shop
  - https://owasp.org/www-project-juice-shop/
- CSP: script-src unsafe-eval [10055] total: 3:
  - https://owasp.org/
  - https://owasp.org/www-project-juice-shop
  - https://owasp.org/www-project-juice-shop/
- CSP: script-src unsafe-inline [10055] total: 3:
  - https://owasp.org/
  - https://owasp.org/www-project-juice-shop
  - https://owasp.org/www-project-juice-shop/
- CSP: style-src unsafe-inline [10055] total: 3:
  - https://owasp.org/
  - https://owasp.org/www-project-juice-shop
  - https://owasp.org/www-project-juice-shop/
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
  - https://owasp.org/cdn-cgi/l/email-protection
  - https://owasp.org/membership/force_majeure/
  - https://owasp.org/some_dir/file.pdf.pdf%00
- Cross-Domain Misconfiguration [10098] total: 10:
  - https://owasp.org/
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/donate?reponame=owasp.github.io
  - https://owasp.org/donate?reponame=www-project-juice-shop&title=OWASP+Juice+Shop
  - https://owasp.org/robots.txt
  - ..
- Source Code Disclosure - C# [10099] total: 1:
  - https://owasp.org/www-community/vulnerabilities/Full_Trust_CLR_Verification_issue_Exploiting_Passing_Reference_Types_by_Reference
- Source Code Disclosure - Java [10099] total: 2:
  - https://owasp.org/www-community/Using_the_Java_Cryptographic_Extensions
  - https://owasp.org/www-community/vulnerabilities/Unsafe_JNI
- Source Code Disclosure - PHP [10099] total: 2:
  - https://owasp.org/www-community/attacks/Code_Injection
  - https://owasp.org/www-community/attacks/Cross-User_Defacement
- Source Code Disclosure - Python [10099] total: 1:
  - https://owasp.org/www-project-pytm/
- Source Code Disclosure - SQL [10099] total: 5:
  - https://owasp.org/www-community/attacks/Blind_SQL_Injection
  - https://owasp.org/www-community/attacks/Web_Parameter_Tampering
  - https://owasp.org/www-community/Hibernate
  - https://owasp.org/www-community/Injection_Theory
  - https://owasp.org/www-project-product-security-capability-framework/
- Source Code Disclosure - Servlet [10099] total: 1:
  - https://owasp.org/www-project-benchmark/
- Sub Resource Integrity Attribute Missing [90003] total: 8:
  - https://owasp.org/
  - https://owasp.org/
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/www-project-juice-shop/
  - ..
- Cross-Domain JavaScript Source File Inclusion [10017] total: 9:
  - https://owasp.org/
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/www-chapter-salt-lake-city/migrated_content
  - https://owasp.org/www-chapter-salt-lake-city/migrated_content
  - ..
- Information Disclosure - Debug Error Messages [10023] total: 1:
  - https://owasp.org/www-community/attacks/SQL_Injection
- Permissions Policy Header Not Set [10063] total: 4:
  - https://owasp.org/cdn-cgi/l/email-protection
  - https://owasp.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
  - https://owasp.org/membership/force_majeure/
  - https://owasp.org/some_dir/file.pdf.pdf%00
- Private IP Disclosure [2] total: 4:
  - https://owasp.org/www-community/attacks/Resource_Injection
  - https://owasp.org/www-community/Virtual_Patching_Best_Practices
  - https://owasp.org/www-project-benchmark/
  - https://owasp.org/www-project-secure-headers/
- Secure Pages Include Mixed Content [10040] total: 1:
  - https://owasp.org/www-project-risk-assessment-framework/
- Strict-Transport-Security Header Not Set [10035] total: 6:
  - https://owasp.org/cdn-cgi/l/email-protection
  - https://owasp.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
  - https://owasp.org/cdn-cgi/styles/cf.errors.css
  - https://owasp.org/cdn-cgi/styles/cf.errors.ie.css
  - https://owasp.org/membership/force_majeure/
  - ..
- Timestamp Disclosure - Unix [10096] total: 9:
  - https://owasp.org/blog/2024/04/09/CycloneDX-v1.6-Released.html
  - https://owasp.org/feed.json
  - https://owasp.org/feed.xml
  - https://owasp.org/www-chapter-los-angeles/
  - https://owasp.org/www-chapter-poland/migrated_content
  - ..
- Information Disclosure - Sensitive Information in URL [10024] total: 1:
  - https://owasp.org/invisible.php?user
- Information Disclosure - Suspicious Comments [10027] total: 9:
  - https://owasp.org/
  - https://owasp.org/%22%20+%20menu.url%20+%20%22
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/blog/2024/11/12/more-than-a-password-day-2024.html
  - https://owasp.org/www-chapter-salt-lake-city/migrated_content
  - ..
- Modern Web Application [10109] total: 11:
  - https://owasp.org/
  - https://owasp.org/%22%20+%20menu.url%20+%20%22
  - https://owasp.org/'%20+%20project.url%20+%20'
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/blog/2024/11/12/more-than-a-password-day-2024.html
  - ..
- Re-examine Cache-control Directives [10015] total: 10:
  - https://owasp.org/
  - https://owasp.org/blog/2024/11/12/more-than-a-password-day-2024.html
  - https://owasp.org/projects/
  - https://owasp.org/robots.txt
  - https://owasp.org/sitemap.xml
  - ..
- Retrieved from Cache [10050] total: 10:
  - https://owasp.org/
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/donate?reponame=www-project-juice-shop&title=OWASP+Juice+Shop
  - https://owasp.org/sitemap.xml
  - https://owasp.org/store
  - ..
- Storable and Cacheable Content [10049] total: 10:
  - https://owasp.org/
  - https://owasp.org/+%20baseurl%20+%20path%20+
  - https://owasp.org/donate?reponame=www-project-juice-shop&title=OWASP+Juice+Shop
  - https://owasp.org/membership-success/
  - https://owasp.org/robots.txt
  - ..
- Vulnerable JS Library [10003] total: 1:
  - https://owasp.org/www--site-theme/assets/js/jquery-3.7.1.min.js

View the following link to download the report.
RunnerID:12250912653

Author

github-actions bot commented Jan 21, 2025

Site: https://owasp.org
New Alerts
- Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 8:
Resolved Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 1:
- Vulnerable JS Library [10003] total: 1:

View the following link to download the report.
RunnerID:12882171984

Author

github-actions bot commented Feb 1, 2025

Site: https://owasp.org
New Alerts
- Vulnerable JS Library [10003] total: 1:
  - https://owasp.org/www--site-theme/assets/js/jquery-3.4.1.min.js

View the following link to download the report.
RunnerID:13086689446

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment