René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"CX CSRF @ src/main/java/org/cysecurity/cspf/jvl/controller/Register.java [refs/heads/master]","articleBody":"**CSRF** issue exists @ **src/main/java/org/cysecurity/cspf/jvl/controller/Register.java** in branch **refs/heads/master**\r\n\r\n*Method processRequest at line 43 of src\\main\\java\\org\\cysecurity\\cspf\\jvl\\controller\\Register.java gets a parameter from a user request from \u0026quot;\u0026quot;username\u0026quot;\u0026quot;. This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).*\r\n\r\nSeverity: Medium\r\n\r\nCWE:352\r\n\r\n[Vulnerability details and guidance](https://cwe.mitre.org/data/definitions/352.html)\r\n\r\n[Checkmarx](https://cxprivatecloud.checkmarx.net/CxWebClient/ViewerMain.aspx?scanid=1007325\u0026projectid=1350\u0026pathid=222)\r\n\r\n[Training](null)\r\n[Recommended Fix](https://cxprivatecloud.checkmarx.net/CxWebClient/ScanQueryDescription.aspx?queryID=648\u0026queryVersionCode=56758536\u0026queryTitle=CSRF)\r\n\r\nLines: 43 44 45 46 47 \r\n\r\n---\r\n[Code (Line #43):](null#L43)\r\n```\r\n         String user=request.getParameter(\"username\");\r\n```\r\n---\r\n[Code (Line #44):](null#L44)\r\n```\r\n          String pass=request.getParameter(\"password\");\r\n```\r\n---\r\n[Code (Line #45):](null#L45)\r\n```\r\n          String email=request.getParameter(\"email\");\r\n```\r\n---\r\n[Code (Line #46):](null#L46)\r\n```\r\n          String about=request.getParameter(\"About\");\r\n```\r\n---\r\n[Code (Line #47):](null#L47)\r\n```\r\n          String secret=request.getParameter(\"secret\");\r\n```\r\n---\r\n","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2022-03-14T18:35:26.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/200/JavaVulnerableLab/issues/200"}