Input_Path_Not_Canonicalized @ BenchmarkTest02567.java

[joaoreis-cx]

Input_Path_Not_Canonicalized issue exists @ BenchmarkTest02567.java in branch master

Method doPost at line 43 of /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02567.java gets dynamic data from the getQueryString element. This element’s value then flows through the code and is eventually used in a file path for local disk access in doPost at line 78 of /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02567.java. This may cause a Path Traversal vulnerability.

Namespace: joaoreis-cx
Repository: test1
Repository Url: https://github.com/joaoreis-cx/test1
CxAST-Project: joaoreis-cx/test1
CxAST platform scan: 53506292-d41c-434c-8792-e513700a84e7
Branch: master
Application: test1
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
CWE: 73
Lines: 43

---

References
Read more