Check logs PI planning week

[PaulClark2]

Log review needs to be completed for PI planning week per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

[jason-upchurch]

Vulnerabilities found this week

FEC-CMS: Total 3

package.json: 1 HIGH, 2 MEDIUM

• Arbitrary File Overwrite: HIGH [High] Snyk: Arbitrary File Overwrite (due 6/15/19) fec-cms#2901
• Denial of Service (DoS) : MEDIUM [Med] Snyk: Denial of Service (DoS) (due 6/2/19) fec-cms#2792
• Prototype Pollution: MEDIUM [Med] Snyk: Prototype Pollution (due 6/10/19) fec-cms#2823

requirements.txt: 1 MEDIUM

• Sandbox Escape: MEDIUM [Med] Snyk: Sandbox Escape (due 6/10/19) fec-cms#2822

OPENFEC: Total 3

package.json: 0

requirements.txt: 1 MEDIUM

• Race Condition : MEDIUM [Med] Snyk: Race Condition (due 5/20/19) #3642

data/flyway/build.gradle: 0

FEC-EREGS: Total 2

package.json: 1 MEDIUM

• Prototype Pollution : MEDIUM [Med] Snyk: Prototype Pollution (due 6/10/19) fec-eregs#439

requirements.txt: 1 MEDIUM

• Race Condition: MEDIUM [Med] Snyk: Race Condition (due 5/20/19) fec-eregs#435

FEC-PATTERN-LIBRARY: Total 1

package.json: 1 MEDIUM
Prototype Pollution: MEDIUM fecgov/fec-pattern-library#135

Account approvals:

No new issues

1 existing issue: ecgov/fec-accounts#174

Search logs: No new users added/removed

Cloud.gov Dashboard: 9 deployer accounts, same as last week.