Check logs sprint 8.7 week 2

[jason-upchurch]

Log review needs to be completed for Sprint 8.7 (week 2) per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

[fec-jli]

Vulnerabilities found this week:

FEC-CMS: Total 4
package.json: 2 MEDIUM
Denial of Service (DoS) : MEDIUM fecgov/fec-cms#2792
Prototype Pollution: MEDIUM fecgov/fec-cms#2823

requirements.txt: 1 HIGH, 1 MEDIUM
CRLF Injection: HIGH fecgov/fec-cms#2862
Sandbox Escape: MEDIUM fecgov/fec-cms#2822

OPENFEC: Total 3
package.json: 0
requirements.txt: 1 HIGH, 1 MEDIUM
CRLF Injection: HIGH #3722
Race Condition : MEDIUM #3642
data/flyway/build.gradle: 1 HIGH, 1 MEDIUM
Integer Overflow: HIGH #3706 (may need re-open)
Privilege Escalation: MEDIUM #3752 (may need re-open)

FEC-EREGS: Total 2
package.json: 1 MEDIUM
Prototype Pollution : MEDIUM fecgov/fec-eregs#439
requirements.txt: 1 MEDIUM
Race Condition: MEDIUM fecgov/fec-eregs#435

FEC-PATTERN-LIBRARY: Total 1
package.json: 1 MEDIUM
Prototype Pollution: MEDIUM fecgov/fec-pattern-library#135

Account approvals: One issue added: fecgov/fec-accounts#174

Search logs: No new users added/removed

Cloud.gov Dashboard: 9 deployer accounts, same as last week.