René's URL Explorer Experiment


Title: [Snyk] Upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118 by Rajcapabilityassessment · Pull Request #4 · Rajcapabilityassessment/java-sec-code · GitHub

Open Graph Title: [Snyk] Upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118 by Rajcapabilityassessment · Pull Request #4 · Rajcapabilityassessment/java-sec-code

X Title: [Snyk] Upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118 by Rajcapabilityassessment · Pull Request #4 · Rajcapabilityassessment/java-sec-code

Description: Java web common vulnerabilities and security code which is base on springboot and spring security - [Snyk] Upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118 by Rajcapabilityassessment · Pull Request #4 · Rajcapabilityassessment/java-sec-code

Open Graph Description: Snyk has created this PR to upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118. ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quick...

X Description: Snyk has created this PR to upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118. ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quick...

Opengraph URL: https://github.com/Rajcapabilityassessment/java-sec-code/pull/4

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:0f8347fa-55bf-78c3-543a-a928735b77b3
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idCEB6:314A86:5FEE9:82500:6A5584F1
html-safe-nonce142999dc4a3a741b22c1630ac0232df9b32371e3bff7665b490a56bbda59def0
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDRUI2OjMxNEE4Njo1RkVFOTo4MjUwMDo2QTU1ODRGMSIsInZpc2l0b3JfaWQiOiIyMDAzMDc4ODc2NzA5MjA0MzMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac828bcdf6b8002d585c93e7d07f387857dd519300bb0b50b734d67d18bac20607
hovercard-subject-tagpull_request:3987464724
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/Rajcapabilityassessment/java-sec-code/4/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/261ad531f761f89cfd0a18528f2dfb1baee6523c22e52be2f45d0fd121bd5f12/Rajcapabilityassessment/java-sec-code/pull/4
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/261ad531f761f89cfd0a18528f2dfb1baee6523c22e52be2f45d0fd121bd5f12/Rajcapabilityassessment/java-sec-code/pull/4
og:image:altSnyk has created this PR to upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118. ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quick...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameRajcapabilityassessment
hostnamegithub.com
expected-hostnamegithub.com
Noneb5665c84831ed9ac4fb79519c16c9c5580ba8092fb8bb6e3e72972ec7197348e
turbo-cache-controlno-cache
go-importgithub.com/Rajcapabilityassessment/java-sec-code git https://github.com/Rajcapabilityassessment/java-sec-code.git
octolytics-dimension-user_id292720477
octolytics-dimension-user_loginRajcapabilityassessment
octolytics-dimension-repository_id1266306797
octolytics-dimension-repository_nwoRajcapabilityassessment/java-sec-code
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id115394871
octolytics-dimension-repository_parent_nwoJoyChou93/java-sec-code
octolytics-dimension-repository_network_root_id115394871
octolytics-dimension-repository_network_root_nwoJoyChou93/java-sec-code
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release3215163789b3dc58dba97bd78a30c20c949f477f
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRajcapabilityassessment%2Fjava-sec-code%2Fpull%2F4
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRajcapabilityassessment%2Fjava-sec-code%2Fpull%2F4
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=Rajcapabilityassessment%2Fjava-sec-code
Reloadhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4
Reloadhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4
Reloadhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4
Rajcapabilityassessment https://github.com/Rajcapabilityassessment
java-sec-codehttps://github.com/Rajcapabilityassessment/java-sec-code
JoyChou93/java-sec-codehttps://github.com/JoyChou93/java-sec-code
Notifications https://github.com/login?return_to=%2FRajcapabilityassessment%2Fjava-sec-code
Fork 0 https://github.com/login?return_to=%2FRajcapabilityassessment%2Fjava-sec-code
Star 0 https://github.com/login?return_to=%2FRajcapabilityassessment%2Fjava-sec-code
Code https://github.com/Rajcapabilityassessment/java-sec-code
Pull requests 5 https://github.com/Rajcapabilityassessment/java-sec-code/pulls
Actions https://github.com/Rajcapabilityassessment/java-sec-code/actions
Projects https://github.com/Rajcapabilityassessment/java-sec-code/projects
Security and quality 0 https://github.com/Rajcapabilityassessment/java-sec-code/security
Insights https://github.com/Rajcapabilityassessment/java-sec-code/pulse
Code https://github.com/Rajcapabilityassessment/java-sec-code
Pull requests https://github.com/Rajcapabilityassessment/java-sec-code/pulls
Actions https://github.com/Rajcapabilityassessment/java-sec-code/actions
Projects https://github.com/Rajcapabilityassessment/java-sec-code/projects
Security and quality https://github.com/Rajcapabilityassessment/java-sec-code/security
Insights https://github.com/Rajcapabilityassessment/java-sec-code/pulse
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
masterhttps://github.com/Rajcapabilityassessment/java-sec-code/tree/master
snyk-upgrade-9944d71d5611d5b34831d8bce6513215https://github.com/Rajcapabilityassessment/java-sec-code/tree/snyk-upgrade-9944d71d5611d5b34831d8bce6513215
Conversationhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4
Commits1 (1)https://github.com/Rajcapabilityassessment/java-sec-code/pull/4/commits
Checkshttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4/checks
Files changedhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4/files
[Snyk] Upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118https://github.com/Rajcapabilityassessment/java-sec-code/pull/4#top
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
masterhttps://github.com/Rajcapabilityassessment/java-sec-code/tree/master
snyk-upgrade-9944d71d5611d5b34831d8bce6513215https://github.com/Rajcapabilityassessment/java-sec-code/tree/snyk-upgrade-9944d71d5611d5b34831d8bce6513215
https://github.com/Rajcapabilityassessment
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
Jul 3, 2026https://github.com/Rajcapabilityassessment/java-sec-code/pull/4#issue-4805176129
https://camo.githubusercontent.com/df79346402fd04b77cc20a02662bb89dd2b049b334119bea34141e0f20030219/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f722d642f73636d2d706c6174666f726d2f736e796b2d70756c6c2d72657175657374732f70722d62616e6e65722d64656661756c742e737667
https://camo.githubusercontent.com/ce0ebaac22bb2122ddc23a04e816f2c02636f050704facca267de1e5c0fed7a2/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f722d642f73636d2d706c6174666f726d2f736e796b2d70756c6c2d72657175657374732f2f73657665726974792d6d656469756d2e737667
SNYK-JAVA-ORGAPACHETOMCAT-13723548https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCAT-13723548
https://camo.githubusercontent.com/bfd61e8c29888eb1f0d18b2a283dfe5947b30ccf3a9903855ec3fa23d79f121c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d657267652532305269736b2533412532304c6f772d3030363430303f7374796c653d666f722d7468652d6261646765
https://camo.githubusercontent.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
View latest project reporthttps://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73?utm_source=github&utm_medium=referral&page=upgrade-pr
Customise PR templateshttps://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template
Adjust upgrade PR settingshttps://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr
Ignore this dependency or unsubscribe from future upgrade PRshttps://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73/settings/integration?pkg=org.apache.tomcat:tomcat-dbcp&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades
Please reload this pagehttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4
https://github.com/snyk-bot
fix: upgrade org.apache.tomcat:tomcat-dbcp from 9.0.8 to 9.0.118https://github.com/Rajcapabilityassessment/java-sec-code/pull/4/commits/e2f09db9025dea1dc195218dab2f6c0330dbca2a
e2f09dbhttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4/commits/e2f09db9025dea1dc195218dab2f6c0330dbca2a
https://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73?utm_source=github&utm_medium=referral&page=upgrade-prhttps://app.eu.snyk.io/org/hsbc-sast-pov-org/project/c12c5f85-7f45-444f-82d9-02c8dfe4dc73?utm_source=github&utm_medium=referral&page=upgrade-pr
https://github.com/Rajcapabilityassessment
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
Jul 3, 2026https://github.com/Rajcapabilityassessment/java-sec-code/pull/4#issuecomment-4878214245
https://camo.githubusercontent.com/bfd61e8c29888eb1f0d18b2a283dfe5947b30ccf3a9903855ec3fa23d79f121c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d657267652532305269736b2533412532304c6f772d3030363430303f7374796c653d666f722d7468652d6261646765
Apache Tomcat 9 Changeloghttps://tomcat.apache.org/tomcat-9.0-doc/changelog.html
Please reload this pagehttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4
https://github.com/Rajcapabilityassessment
Rajcapabilityassessmenthttps://github.com/Rajcapabilityassessment
Jul 3, 2026https://github.com/Rajcapabilityassessment/java-sec-code/pull/4#issuecomment-4878218380
https://camo.githubusercontent.com/e7f389442c71891df7e5606ce5bde55dbd7d8a004e115f3587123cfe09f49387/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f6c6f676f2f436865636b6d6172782e706e67
3477ee4d-38e5-46dd-8d4e-d3413bc9d167https://deu.ast.checkmarx.net/projects/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/scans?id=3477ee4d-38e5-46dd-8d4e-d3413bc9d167&branch=snyk-upgrade-9944d71d5611d5b34831d8bce6513215
https://camo.githubusercontent.com/3f2733c3453dae31f9062f35c96bfef505c9514434ba977bd0452d55ee4f006b/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f437269746963616c2e706e67
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
https://camo.githubusercontent.com/3f2733c3453dae31f9062f35c96bfef505c9514434ba977bd0452d55ee4f006b/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f437269746963616c2e706e67
CGI_Stored_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6677642751554344050
70https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/security/AntObjectInputStream.java#L70
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=NPHX010gnB%2Be%2F15OaWBlAghCTvQ%3D&redirect=true
https://camo.githubusercontent.com/3f2733c3453dae31f9062f35c96bfef505c9514434ba977bd0452d55ee4f006b/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f437269746963616c2e706e67
CGI_Stored_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6677642751554344050
53https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/PathTraversal.java#L53
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=pCVSy7LYnW%2FfCRmMu8Sbkot7Dq4%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
31https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/WebSockets.java#L31
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=GnUFJ106kBLv6BsB0gI6BUpJb74%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
31https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/WebSockets.java#L31
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=hSCJglkG5A67K0lUjpA%2FUviMjUM%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=jfIO2eNh6PNFQ83UphHMVM2Hmrw%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
54https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/WebSockets.java#L54
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=oxe40IRghhUg3eFR6tKvUz5S50k%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
54https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/WebSockets.java#L54
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=Wzs73VkB4rToXG70zHDXmQX8IaI%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=dtC5JaJtiSUVHeaHduXuwFRTxGE%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=hxGYpAbEqsIY8FMx%2FXOjrbs33Ks%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
55https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/WebSockets.java#L55
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=JvgLMnVjIEZHJyF21QFPkDeRWQs%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=vyb9uSdFGqM4a%2FzBbJQqqn9oQFE%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
55https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/WebSockets.java#L55
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=X7NukisnpZy2uFqem1RGj5K5T3U%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
32https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/WebSockets.java#L32
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=YXNYSoH%2FPt0cHVCDss6jbiJgVpw%3D&redirect=true
https://camo.githubusercontent.com/1a304402df02c49e4fc43fae4f27012d3770d2bf9395d139baee0cb481ab8591/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f486967682e706e67
CGI_Reflected_XSShttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/79/6505451857941093156
32https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/WebSockets.java#L32
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=4HMEDozEtanYOoiNMaykp4fN708%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Command_Argument_Injectionhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/88/10909153137976385191
52https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/CommandInject.java#L52
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=9Il2k3dY14Dbj4NB1x8hr8yC6N8%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Command_Argument_Injectionhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/88/10909153137976385191
42https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/CommandInject.java#L42
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=qXjy2Q0cb4srTPLnRoFFM5SOrtE%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Command_Argument_Injectionhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/88/10909153137976385191
63https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Rce.java#L63
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=94zuY%2Fw1eEvTl8h7ED%2BJrjOEImA%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Command_Argument_Injectionhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/88/10909153137976385191
25https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/CommandInject.java#L25
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=idzUwQoeWZ5fAQqmjxu6R1Z3Sgs%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/434/5783575033343291143
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=AUWnB9hXf4%2FbrzZNuTU4biP8NzI%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/434/5783575033343291143
241https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/XXE.java#L241
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=cIZvgVn2pEZpH12aY%2BB2D6HOr0k%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/434/5783575033343291143
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=NUaz4AxwcNeptGKPM7rilXUG1G8%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/434/5783575033343291143
21https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/WebUtils.java#L21
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=Y%2FJNgGYZn4gVE%2FUylzzecki4rXI%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/434/5783575033343291143
186https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L186
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=cuI%2FCzmJ7SEzeZGri8HKED22QWs%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/434/5783575033343291143
61https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L61
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=dn8GOOQ5OxRCOIJ0O2cLSC%2BJNLM%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Dangerous_File_Size_Uploadhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/434/5783575033343291143
143https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L143
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=wxXw0e7F%2FcNqrnpnXiEJ1i%2B2Qt8%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Information_Exposure_Through_Query_Stringhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/598/2456224872885031595
26https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/security/LoginFailureHandler.java#L26
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=zFXJ6fnKw0ztsSJZ4kOVMi7DO7Y%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
JWT_Use_Of_Hardcoded_Secrethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/321/2420793684363197756
20https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/JwtUtils.java#L20
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=SMY4Qhs1eaZSi5SaqKwbQwkWoQE%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/614/17656269117524994417
42https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Login.java#L42
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=5zAjVdkW4IOZDWDD%2B8vdUMHG0h4%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/614/17656269117524994417
44https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/XSS.java#L44
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=Rw8yjb8xbPQ9CwUIoUOfvMG9NpE%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/614/17656269117524994417
27https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/CRLFInjection.java#L27
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=vYZ3JBnp3kYVwPP8ViEUJ%2FD9dFU%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/614/17656269117524994417
17https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/CookieUtils.java#L17
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=JluXnDRlwjnVwHWi5PGlbm%2BWnkQ%3D&redirect=true
https://camo.githubusercontent.com/589e349f6aa4dee707fbfc3561cc7bba3bd23623fd70b2959c413a830b5ba10e/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4d656469756d2e706e67
Secure_Cookie_Flag_Not_Sethttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/614/17656269117524994417
30https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/CookieUtils.java#L30
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=SEveR%2Bk4ARleVxStdEV1pCTy%2BTs%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Cookie_Overly_Broad_Pathhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/539/4631416139160742991
43https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Jwt.java#L43
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=aJiLXZe437snfNzjf4JXmfQjui4%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Cookie_Overly_Broad_Pathhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/539/4631416139160742991
41https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Login.java#L41
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=Thd4hdlfXDn9SFVqyIuCc4Wk31A%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Cookie_Overly_Broad_Pathhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/539/4631416139160742991
29https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/CookieUtils.java#L29
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=fojomFu%2BP22Bk1k9m94trPuPVDs%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Cookie_Overly_Broad_Pathhttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/539/4631416139160742991
16https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/CookieUtils.java#L16
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=YU9D0RLpog8GpA6rbnpT%2FaQbqD4%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Creation_of_Temp_File_in_Dir_with_Incorrect_Permissionshttps://cwe.mitre.org/data/definitions/379.html
180https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L180
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=mgJNNVanKRK%2BSgvrmY7%2BuZXZrhU%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
67https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/security/AntObjectInputStream.java#L67
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=PO0SPh8mF9qQ%2FZuXcO%2F5tqmjTO8%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
100https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/SQLI.java#L100
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=%2BvFkW7yIDOqXVZjpXBPnIJV4iV0%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
49https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Deserialize.java#L49
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=29RcXS0NcHxO7IYqp2B9ocJZBXE%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
58https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/security/AntObjectInputStream.java#L58
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=AmktNNnLrOw%2FVJC5jdFUU6bpZ5M%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
76https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Deserialize.java#L76
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=bRJ4JGhPP4ldsp1XUOH9Y0m5t5s%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
37https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Shiro.java#L37
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=bSN4nWeHi49Po7p3Ok7I81uxX00%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
58https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/SQLI.java#L58
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=e0nm5xhPvHguW7t%2FhxX4tGiESxc%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
59https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/security/AntObjectInputStream.java#L59
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=GdNizMlHR9YAF9a8%2Fegz%2FXE0Ql4%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
296https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/XXE.java#L296
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=QWLt43DOkrZbkex4tMyVFBluw3w%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
326https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/XXE.java#L326
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=6kuhK9bAJtsflm4737D68u229Mg%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
66https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/security/AntObjectInputStream.java#L66
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=B2v3eKLKSRiUE6X53YbK8ZVfqNA%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
185https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L185
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=KDQP7Z0kqOlPvHjhBwDGNrG9EDI%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
38https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Rce.java#L38
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=LtQ6qbxLfs%2BVzFmDGBZ1GG0pLaM%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
274https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/XXE.java#L274
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=NwUD2a5DelVlWRWtrBuM0xXYgnI%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
77https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/HttpUtils.java#L77
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=phfE%2FVKjhNNWh1qKXKevufU5Pps%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
72https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/Rce.java#L72
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=7Ks9DLcFNWk6E8Qiih9%2FYtjKLdg%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
124https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/HttpUtils.java#L124
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=eXdBOccmQRYkbdCDZ6I%2BbMiPOrU%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
144https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/SQLI.java#L144
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=UE8cPUKg9yb64CgYUGX%2Fy3GlKew%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
96https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/HttpUtils.java#L96
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=YQTsMnan5SNh2M26NyOK7Gooz%2BE%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Improper_Resource_Shutdown_or_Releasehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/404/10126224546790193959
20https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/WebUtils.java#L20
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=yXhUXPmFi66x685cXHMBpNBOn%2FM%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/732/18060436674704340607
58https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/security/AntObjectInputStream.java#L58
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=GSl%2F2zPydigPYihzdY6DywhTgt4%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/732/18060436674704340607
158https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L158
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=mR9dyeTr4D9PblxX%2FrC7enWiy3Q%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/732/18060436674704340607
144https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L144
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=%2FoyrkfK%2BS8cZKOBZqVdvgwZwgLI%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/732/18060436674704340607
180https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L180
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=sxdiB4m%2Fm1ZaGjO1gepEZc07gI0%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/732/18060436674704340607
43https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/PathTraversal.java#L43
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=6TXpHbSPsoUDGQFgJLDGzZ8IBhM%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Incorrect_Permission_Assignment_For_File_System_Resourceshttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/732/18060436674704340607
62https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/FileUpload.java#L62
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=kYVCicZ%2B3wyhEZlsXavb4h4Pr2U%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/209/2701599985492857111
105https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/HttpUtils.java#L105
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=2ep4cgaqTm%2BDhzHJKNYC5WTzVb0%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/209/2701599985492857111
256https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/controller/XXE.java#L256
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=8Hu11DMX1Y4jTyS9STuugrRpZeg%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/209/2701599985492857111
133https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/HttpUtils.java#L133
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=b6e%2Fwtlrvi77aTKHaaoFcRqV3%2FE%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/209/2701599985492857111
46https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/JwtUtils.java#L46
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=ckrQJuvwC%2FiSy2VKtuMMzkB8%2Fko%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/209/2701599985492857111
133https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/HttpUtils.java#L133
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=yfftuPLmCJWyQSSd5QxRhYeMIX0%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/209/2701599985492857111
213https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/HttpUtils.java#L213
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=yhTjqnEYZrniV7rX6UFwoMBUqds%3D&redirect=true
https://camo.githubusercontent.com/93ef7512e0bca991f06927b1bbe2112b29b5f6ec62285474ab19cf48cda2a382/68747470733a2f2f63646e2e6173742e636865636b6d6172782e6e65742f696e746567726174696f6e732f73657665726974792f4c6f772e706e67
Information_Exposure_Through_an_Error_Messagehttps://deu.ast.checkmarx.net/results/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/sast/description/209/2701599985492857111
105https://github.com/Rajcapabilityassessment/java-sec-code/blob/snyk-upgrade-9944d71d5611d5b34831d8bce6513215/src/main/java/org/joychou/util/HttpUtils.java#L105
Attack Vectorhttps://deu.ast.checkmarx.net/results/3477ee4d-38e5-46dd-8d4e-d3413bc9d167/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/sast?result-id=yI3vSXxqeruq%2FgoL5LXdBxM%2FqZQ%3D&redirect=true
More results are available on the CxOne platformhttps://deu.ast.checkmarx.net/projects/a2ef6fe8-24c5-4799-b3fd-6ad09dd1a0aa/scans?id=3477ee4d-38e5-46dd-8d4e-d3413bc9d167&branch=snyk-upgrade-9944d71d5611d5b34831d8bce6513215
@Checkmarxhttps://github.com/Checkmarx
Please reload this pagehttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4
https://github.co/hiddenchars
https://github.com/Rajcapabilityassessment/java-sec-code/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRajcapabilityassessment%2Fjava-sec-code%2Fpull%2F4
Please reload this pagehttps://github.com/Rajcapabilityassessment/java-sec-code/pull/4
https://github.com/Rajcapabilityassessment
https://github.com/snyk-bot
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.