René's URL Explorer Experiment


Title: [Snyk] Upgrade org.springframework.boot:spring-boot-starter-security from 2.1.5.RELEASE to 2.7.18 by Rajcapabilityassessment · Pull Request #2 · Rajcapabilityassessment/java-sec-code · GitHub

Open Graph Title: [Snyk] Upgrade org.springframework.boot:spring-boot-starter-security from 2.1.5.RELEASE to 2.7.18 by Rajcapabilityassessment · Pull Request #2 · Rajcapabilityassessment/java-sec-code

X Title: [Snyk] Upgrade org.springframework.boot:spring-boot-starter-security from 2.1.5.RELEASE to 2.7.18 by Rajcapabilityassessment · Pull Request #2 · Rajcapabilityassessment/java-sec-code

Description: Java web common vulnerabilities and security code which is base on springboot and spring security - [Snyk] Upgrade org.springframework.boot:spring-boot-starter-security from 2.1.5.RELEASE to 2.7.18 by Rajcapabilityassessment · Pull Request #2 · Rajcapabilityassessment/java-sec-code

Open Graph Description: Snyk has created this PR to upgrade org.springframework.boot:spring-boot-starter-security from 2.1.5.RELEASE to 2.7.18. ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vu...

X Description: Snyk has created this PR to upgrade org.springframework.boot:spring-boot-starter-security from 2.1.5.RELEASE to 2.7.18. ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vu...

Opengraph URL: https://github.com/Rajcapabilityassessment/java-sec-code/pull/2

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:4d227a36-e524-5520-d342-afe93611a925
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8FA6:D284D:2228AF4:316FD76:6A5507FA
html-safe-nonceb69eece441fd831219cf7934b3e888390d480a9a81b9244ce61d1ee51ab23106
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4RkE2OkQyODREOjIyMjhBRjQ6MzE2RkQ3Njo2QTU1MDdGQSIsInZpc2l0b3JfaWQiOiI4NzA5MjMwMDk3ODY0MTMyNjAyIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmacff1fd2a630a782a0264ea69b508a24a7d7b09cc4d6e527c38c971cc2358df93f
hovercard-subject-tagpull_request:3987461440
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/Rajcapabilityassessment/java-sec-code/2/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/aa0d2d8a5e7403ee9a266f26aab3982c67c4eb89cf2be794612aa73202dadd3b/Rajcapabilityassessment/java-sec-code/pull/2
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/aa0d2d8a5e7403ee9a266f26aab3982c67c4eb89cf2be794612aa73202dadd3b/Rajcapabilityassessment/java-sec-code/pull/2
og:image:altSnyk has created this PR to upgrade org.springframework.boot:spring-boot-starter-security from 2.1.5.RELEASE to 2.7.18. ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vu...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameRajcapabilityassessment
hostnamegithub.com
expected-hostnamegithub.com
Noneeae2aab99907699a22d2c8449aa683ca74454fca87211b98f7c7b722086b2839
turbo-cache-controlno-cache
go-importgithub.com/Rajcapabilityassessment/java-sec-code git https://github.com/Rajcapabilityassessment/java-sec-code.git
octolytics-dimension-user_id292720477
octolytics-dimension-user_loginRajcapabilityassessment
octolytics-dimension-repository_id1266306797
octolytics-dimension-repository_nwoRajcapabilityassessment/java-sec-code
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id115394871
octolytics-dimension-repository_parent_nwoJoyChou93/java-sec-code
octolytics-dimension-repository_network_root_id115394871
octolytics-dimension-repository_network_root_nwoJoyChou93/java-sec-code
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release6a35ab858be185cd86d12b93a43bccf34e8d8536
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRajcapabilityassessment%2Fjava-sec-code%2Fpull%2F2
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRajcapabilityassessment%2Fjava-sec-code%2Fpull%2F2
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=Rajcapabilityassessment%2Fjava-sec-code
Reloadhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2
Reloadhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2
Reloadhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2
Rajcapabilityassessment https://github.com/Rajcapabilityassessment
java-sec-codehttps://github.com/Rajcapabilityassessment/java-sec-code
JoyChou93/java-sec-codehttps://github.com/JoyChou93/java-sec-code
Notifications https://github.com/login?return_to=%2FRajcapabilityassessment%2Fjava-sec-code
Fork 0 https://github.com/login?return_to=%2FRajcapabilityassessment%2Fjava-sec-code
Star 0 https://github.com/login?return_to=%2FRajcapabilityassessment%2Fjava-sec-code
Code https://github.com/Rajcapabilityassessment/java-sec-code
Pull requests 5 https://github.com/Rajcapabilityassessment/java-sec-code/pulls
Actions https://github.com/Rajcapabilityassessment/java-sec-code/actions
Projects https://github.com/Rajcapabilityassessment/java-sec-code/projects
Security and quality 0 https://github.com/Rajcapabilityassessment/java-sec-code/security
Insights https://github.com/Rajcapabilityassessment/java-sec-code/pulse
Code https://github.com/Rajcapabilityassessment/java-sec-code
Pull requests https://github.com/Rajcapabilityassessment/java-sec-code/pulls
Actions https://github.com/Rajcapabilityassessment/java-sec-code/actions
Projects https://github.com/Rajcapabilityassessment/java-sec-code/projects
Security and quality https://github.com/Rajcapabilityassessment/java-sec-code/security
Insights https://github.com/Rajcapabilityassessment/java-sec-code/pulse
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
masterhttps://github.com/Rajcapabilityassessment/java-sec-code/tree/master
snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33https://github.com/Rajcapabilityassessment/java-sec-code/tree/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33
Conversationhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2
Commits1 (1)https://github.com/Rajcapabilityassessment/java-sec-code/pull/2/commits
Checkshttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2/checks
Files changedhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2/files
[Snyk] Upgrade org.springframework.boot:spring-boot-starter-security from 2.1.5.RELEASE to 2.7.18https://github.com/Rajcapabilityassessment/java-sec-code/pull/2#top
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
masterhttps://github.com/Rajcapabilityassessment/java-sec-code/tree/master
snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33https://github.com/Rajcapabilityassessment/java-sec-code/tree/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33
https://github.com/Rajcapabilityassessment
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
Jul 3, 2026https://github.com/Rajcapabilityassessment/java-sec-code/pull/2#issue-4805172256
https://camo.githubusercontent.com/df79346402fd04b77cc20a02662bb89dd2b049b334119bea34141e0f20030219/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f722d642f73636d2d706c6174666f726d2f736e796b2d70756c6c2d72657175657374732f70722d62616e6e65722d64656661756c742e737667
https://camo.githubusercontent.com/7b1ec741b09fccd198e32906196af309f45689f773ca7bfd758c61a7792a0369/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d657267652532305269736b253341253230486967682d3442303030303f7374796c653d666f722d7468652d6261646765
https://camo.githubusercontent.com/64d04694ddd70651dd56546b7bec1fc59ee077bea69d52840a401f459b74992f/68747470733a2f2f6170692e7365676d656e742e696f2f76312f706978656c2f747261636b3f646174613d65794a33636d6c305a55746c65534936496d5a6861325574613256354969776959573576626e6c746233567a535751694f6949344d6a63315a5442684e79316d59324a6d4c5451785a5751744f57466a4e7930304e3259784e47566b595749784e3255694c434a6c646d567564434936496c425349485a705a58646c5a434973496e42796233426c636e52705a584d694f6e736963484a4a5a434936496a67794e7a566c4d4745334c575a6a596d59744e44466c5a43303559574d334c5451335a6a45305a575268596a45335a534a3966513d3d
View latest project reporthttps://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73?utm_source=github&utm_medium=referral&page=upgrade-pr
Customise PR templateshttps://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template
Adjust upgrade PR settingshttps://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr
Ignore this dependency or unsubscribe from future upgrade PRshttps://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73/settings/integration?pkg=org.springframework.boot:spring-boot-starter-security&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades
Please reload this pagehttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2
https://github.com/snyk-bot
fix: upgrade org.springframework.boot:spring-boot-starter-security fr…https://github.com/Rajcapabilityassessment/java-sec-code/pull/2/commits/5aba519595fcd97d785698a5aaca10cb1aa30878
5aba519https://github.com/Rajcapabilityassessment/java-sec-code/pull/2/commits/5aba519595fcd97d785698a5aaca10cb1aa30878
https://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73?utm_source=github&utm_medium=referral&page=upgrade-prhttps://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73?utm_source=github&utm_medium=referral&page=upgrade-pr
https://github.com/Rajcapabilityassessment
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
Jul 3, 2026https://github.com/Rajcapabilityassessment/java-sec-code/pull/2#issuecomment-4878210348
https://camo.githubusercontent.com/7b1ec741b09fccd198e32906196af309f45689f773ca7bfd758c61a7792a0369/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d657267652532305269736b253341253230486967682d3442303030303f7374796c653d666f722d7468652d6261646765
Please reload this pagehttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2
https://github.com/Rajcapabilityassessment
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
Jul 3, 2026https://github.com/Rajcapabilityassessment/java-sec-code/pull/2#issuecomment-4878215342
https://camo.githubusercontent.com/e7f389442c71891df7e5606ce5bde55dbd7d8a004e115f3587123cfe09f49387/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f6c6f676f2f436865636b6d6172782e706e67
6d771b69-9e8e-4398-891d-f73c418d4244https://deu.ast.checkmarx.net/projects/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/scans?id=6d771b69-9e8e-4398-891d-f73c418d4244&branch=snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33
https://camo.githubusercontent.com/3f2733c3453dae31f9062f35c96bfef505c9514434ba977bd0452d55ee4f006b/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f437269746963616c2e706e67
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
https://camo.githubusercontent.com/3f2733c3453dae31f9062f35c96bfef505c9514434ba977bd0452d55ee4f006b/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f437269746963616c2e706e67
CGI_Stored_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6677642751554344050
70https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/security/AntObjectInputStream.java#L70
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=NPHX010gnB%2Be%2F15OaWBlAghCTvQ%3D&redirect=true
https://camo.githubusercontent.com/3f2733c3453dae31f9062f35c96bfef505c9514434ba977bd0452d55ee4f006b/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f437269746963616c2e706e67
CGI_Stored_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6677642751554344050
53https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/PathTraversal.java#L53
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=pCVSy7LYnW%2FfCRmMu8Sbkot7Dq4%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
31https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/WebSockets.java#L31
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=GnUFJ106kBLv6BsB0gI6BUpJb74%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
31https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/WebSockets.java#L31
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=hSCJglkG5A67K0lUjpA%2FUviMjUM%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=jfIO2eNh6PNFQ83UphHMVM2Hmrw%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
54https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/WebSockets.java#L54
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=oxe40IRghhUg3eFR6tKvUz5S50k%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
54https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/WebSockets.java#L54
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=Wzs73VkB4rToXG70zHDXmQX8IaI%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=dtC5JaJtiSUVHeaHduXuwFRTxGE%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=hxGYpAbEqsIY8FMx%2FXOjrbs33Ks%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
55https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/WebSockets.java#L55
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=JvgLMnVjIEZHJyF21QFPkDeRWQs%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=vyb9uSdFGqM4a%2FzBbJQqqn9oQFE%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
55https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/WebSockets.java#L55
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=X7NukisnpZy2uFqem1RGj5K5T3U%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
32https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/WebSockets.java#L32
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=YXNYSoH%2FPt0cHVCDss6jbiJgVpw%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/79/6505451857941093156
32https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/WebSockets.java#L32
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=4HMEDozEtanYOoiNMaykp4fN708%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Command_Argument_Injectionhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/88/10909153137976385191
52https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/CommandInject.java#L52
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=9Il2k3dY14Dbj4NB1x8hr8yC6N8%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Command_Argument_Injectionhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/88/10909153137976385191
42https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/CommandInject.java#L42
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=qXjy2Q0cb4srTPLnRoFFM5SOrtE%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Command_Argument_Injectionhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/88/10909153137976385191
63https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Rce.java#L63
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=94zuY%2Fw1eEvTl8h7ED%2BJrjOEImA%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Command_Argument_Injectionhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/88/10909153137976385191
25https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/CommandInject.java#L25
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=idzUwQoeWZ5fAQqmjxu6R1Z3Sgs%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/434/5783575033343291143
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=AUWnB9hXf4%2FbrzZNuTU4biP8NzI%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/434/5783575033343291143
241https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/XXE.java#L241
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=cIZvgVn2pEZpH12aY%2BB2D6HOr0k%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/434/5783575033343291143
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=NUaz4AxwcNeptGKPM7rilXUG1G8%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/434/5783575033343291143
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=Y%2FJNgGYZn4gVE%2FUylzzecki4rXI%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/434/5783575033343291143
186https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L186
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=cuI%2FCzmJ7SEzeZGri8HKED22QWs%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/434/5783575033343291143
61https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L61
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=dn8GOOQ5OxRCOIJ0O2cLSC%2BJNLM%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/434/5783575033343291143
143https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L143
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=wxXw0e7F%2FcNqrnpnXiEJ1i%2B2Qt8%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Information_Exposure_Through_Query_Stringhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/598/2456224872885031595
26https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/security/LoginFailureHandler.java#L26
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=zFXJ6fnKw0ztsSJZ4kOVMi7DO7Y%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
JWT_Use_Of_Hardcoded_Secrethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/321/2420793684363197756
20https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/JwtUtils.java#L20
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=SMY4Qhs1eaZSi5SaqKwbQwkWoQE%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/614/17656269117524994417
42https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Login.java#L42
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=5zAjVdkW4IOZDWDD%2B8vdUMHG0h4%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/614/17656269117524994417
44https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/XSS.java#L44
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=Rw8yjb8xbPQ9CwUIoUOfvMG9NpE%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/614/17656269117524994417
27https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/CRLFInjection.java#L27
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=vYZ3JBnp3kYVwPP8ViEUJ%2FD9dFU%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/614/17656269117524994417
17https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/CookieUtils.java#L17
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=JluXnDRlwjnVwHWi5PGlbm%2BWnkQ%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/614/17656269117524994417
30https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/CookieUtils.java#L30
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=SEveR%2Bk4ARleVxStdEV1pCTy%2BTs%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Cookie_Overly_Broad_Pathhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/539/4631416139160742991
43https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Jwt.java#L43
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=aJiLXZe437snfNzjf4JXmfQjui4%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Cookie_Overly_Broad_Pathhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/539/4631416139160742991
41https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Login.java#L41
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=Thd4hdlfXDn9SFVqyIuCc4Wk31A%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Cookie_Overly_Broad_Pathhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/539/4631416139160742991
29https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/CookieUtils.java#L29
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=fojomFu%2BP22Bk1k9m94trPuPVDs%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Cookie_Overly_Broad_Pathhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/539/4631416139160742991
16https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/CookieUtils.java#L16
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=YU9D0RLpog8GpA6rbnpT%2FaQbqD4%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Creation_of_Temp_File_in_Dir_with_Incorrect_Permissionshttps://cwe.mitre.org/data/definitions/379.html
180https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L180
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=mgJNNVanKRK%2BSgvrmY7%2BuZXZrhU%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
67https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/security/AntObjectInputStream.java#L67
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=PO0SPh8mF9qQ%2FZuXcO%2F5tqmjTO8%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
100https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/SQLI.java#L100
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=%2BvFkW7yIDOqXVZjpXBPnIJV4iV0%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
49https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Deserialize.java#L49
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=29RcXS0NcHxO7IYqp2B9ocJZBXE%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
58https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/security/AntObjectInputStream.java#L58
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=AmktNNnLrOw%2FVJC5jdFUU6bpZ5M%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
76https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Deserialize.java#L76
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=bRJ4JGhPP4ldsp1XUOH9Y0m5t5s%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
37https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Shiro.java#L37
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=bSN4nWeHi49Po7p3Ok7I81uxX00%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
58https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/SQLI.java#L58
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=e0nm5xhPvHguW7t%2FhxX4tGiESxc%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
59https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/security/AntObjectInputStream.java#L59
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=GdNizMlHR9YAF9a8%2Fegz%2FXE0Ql4%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
296https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/XXE.java#L296
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=QWLt43DOkrZbkex4tMyVFBluw3w%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
326https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/XXE.java#L326
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=6kuhK9bAJtsflm4737D68u229Mg%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
66https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/security/AntObjectInputStream.java#L66
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=B2v3eKLKSRiUE6X53YbK8ZVfqNA%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
185https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L185
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=KDQP7Z0kqOlPvHjhBwDGNrG9EDI%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
38https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Rce.java#L38
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=LtQ6qbxLfs%2BVzFmDGBZ1GG0pLaM%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
274https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/XXE.java#L274
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=NwUD2a5DelVlWRWtrBuM0xXYgnI%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
77https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/HttpUtils.java#L77
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=phfE%2FVKjhNNWh1qKXKevufU5Pps%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
72https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/Rce.java#L72
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=7Ks9DLcFNWk6E8Qiih9%2FYtjKLdg%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
124https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/HttpUtils.java#L124
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=eXdBOccmQRYkbdCDZ6I%2BbMiPOrU%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
144https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/SQLI.java#L144
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=UE8cPUKg9yb64CgYUGX%2Fy3GlKew%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
96https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/HttpUtils.java#L96
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=YQTsMnan5SNh2M26NyOK7Gooz%2BE%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/404/10126224546790193959
20https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/WebUtils.java#L20
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=yXhUXPmFi66x685cXHMBpNBOn%2FM%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/732/18060436674704340607
58https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/security/AntObjectInputStream.java#L58
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=GSl%2F2zPydigPYihzdY6DywhTgt4%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/732/18060436674704340607
158https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L158
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=mR9dyeTr4D9PblxX%2FrC7enWiy3Q%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/732/18060436674704340607
144https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L144
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=%2FoyrkfK%2BS8cZKOBZqVdvgwZwgLI%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/732/18060436674704340607
180https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L180
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=sxdiB4m%2Fm1ZaGjO1gepEZc07gI0%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/732/18060436674704340607
43https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/PathTraversal.java#L43
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=6TXpHbSPsoUDGQFgJLDGzZ8IBhM%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/732/18060436674704340607
62https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/FileUpload.java#L62
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=kYVCicZ%2B3wyhEZlsXavb4h4Pr2U%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/209/2701599985492857111
105https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/HttpUtils.java#L105
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=2ep4cgaqTm%2BDhzHJKNYC5WTzVb0%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/209/2701599985492857111
256https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/controller/XXE.java#L256
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=8Hu11DMX1Y4jTyS9STuugrRpZeg%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/209/2701599985492857111
133https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/HttpUtils.java#L133
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=b6e%2Fwtlrvi77aTKHaaoFcRqV3%2FE%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/209/2701599985492857111
46https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/JwtUtils.java#L46
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=ckrQJuvwC%2FiSy2VKtuMMzkB8%2Fko%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/209/2701599985492857111
133https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/HttpUtils.java#L133
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=yfftuPLmCJWyQSSd5QxRhYeMIX0%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/209/2701599985492857111
213https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/HttpUtils.java#L213
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=yhTjqnEYZrniV7rX6UFwoMBUqds%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/6d771b69-9e8e-4398-891d-f73c418d4244/sast/description/209/2701599985492857111
105https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33/src/main/java/org/joychou/util/HttpUtils.java#L105
Attack Vectorhttps://deu.ast.checkmarx.net/results/6d771b69-9e8e-4398-891d-f73c418d4244/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=yI3vSXxqeruq%2FgoL5LXdBxM%2FqZQ%3D&redirect=true
More results are available on the CxOne platformhttps://deu.ast.checkmarx.net/projects/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/scans?id=6d771b69-9e8e-4398-891d-f73c418d4244&branch=snyk-upgrade-d6fa1cd5c53215960ab635d2051d5d33
@Checkmarxhttps://github.com/Checkmarx
Please reload this pagehttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2
https://github.co/hiddenchars
https://github.com/Rajcapabilityassessment/java-sec-code/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRajcapabilityassessment%2Fjava-sec-code%2Fpull%2F2
Please reload this pagehttps://github.com/Rajcapabilityassessment/java-sec-code/pull/2
https://github.com/Rajcapabilityassessment
https://github.com/snyk-bot
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.