log44jUpdate pom.xml

[Yoavast]

No description provided.

[Yoavast]

Checkmarx AST – Scan Summary & Details – b8a73d88-f4a1-47ea-9ff2-b52b521d070c

New Issues

Severity	Issue	File / Package	Scan Engine
HIGH	ALB Listening on HTTP	/terraform_examples/positive2.tf: 70	CxKICS
HIGH	ALB Listening on HTTP	/terraform_examples/positive1.tf: 9	CxKICS
HIGH	CVE-2017-1000048	Npm-qs-6.0.0	CxSCA
HIGH	CVE-2019-10744	Npm-lodash-4.17.11	CxSCA
HIGH	CVE-2020-7212	Pip-urllib3-1.25.7	CxSCA
HIGH	CVE-2020-8203	Npm-lodash-4.17.11	CxSCA
HIGH	CVE-2021-23337	Npm-lodash-4.17.11	CxSCA
HIGH	CVE-2021-33503	Pip-urllib3-1.25.7	CxSCA
HIGH	Cx0b414307-5d4b	Npm-lodash-4.17.11	CxSCA
HIGH	Cx0da5cbd4-cf4a	Npm-flow-dev-tools-99.10.9	CxSCA
HIGH	Cx1073f13c-89c5	Npm-flow-dev-tools-99.10.9	CxSCA
HIGH	Cx1878d7df-3b59	Npm-ua-parser-js-0.7.29	CxSCA
HIGH	Cx1ef60849-fcd7	Npm-flow-dev-tools-99.10.9	CxSCA
HIGH	Cx1fc3f6a1-2cd1	Npm-ua-parser-js-0.7.29	CxSCA
HIGH	Cx20bdc79b-1d12	Npm-node-ipc-9.2.2	CxSCA
HIGH	Cx2bdbcd08-ec41	Npm-scs-0.0.1	CxSCA
HIGH	Cx30d094a3-75d2	Npm-momnet-2.29.1	CxSCA
HIGH	Cx3d052b02-bfd6	Npm-ua-parser-js-0.7.29	CxSCA
HIGH	Cx3ed63596-c1ee	Npm-scs-0.0.1	CxSCA
HIGH	Cx41601c06-7ee5	Npm-node-ipc-9.2.2	CxSCA
HIGH	Cx4b063fad-dd9e	Npm-ua-parser-js-0.7.29	CxSCA
HIGH	Cx573daf99-81d3	Npm-ua-parser-js-0.7.29	CxSCA
HIGH	Cx7d9d3b09-bebe	Npm-scs-0.0.1	CxSCA
HIGH	Cxa4d62cac-d116	Npm-ua-parser-js-0.7.29	CxSCA
HIGH	Cxad981671-f40c	Npm-momnet-2.29.1	CxSCA
HIGH	Cxb23ef3b6-5f74	Npm-scs-0.0.1	CxSCA
HIGH	Cxbd45c2b9-4622	Npm-ua-parser-js-0.7.29	CxSCA
HIGH	Cxcb9d437e-a5b5	Npm-scs-0.0.1	CxSCA
HIGH	Cxcc09496a-59c8	Npm-js-yaml-3.6.1	CxSCA
HIGH	Cxd1df8707-be05	Npm-ua-parser-js-0.7.29	CxSCA
HIGH	Cxdca8e59f-8bfe	Npm-inflight-1.0.6	CxSCA
HIGH	Cxec49316b-56df	Npm-js-yaml-3.6.1	CxSCA
HIGH	Cxed42b94c-fac4	Npm-scs-0.0.1	CxSCA
HIGH	EC2 Instance Has Public IP	/terraform_examples/negative2.tf: 83, 96, 109	CxKICS
HIGH	EC2 Instance Has Public IP	/terraform_examples/positive2.tf: 82, 95, 108	CxKICS
HIGH	Missing User Instruction	/Dockerfile: 1	CxKICS
HIGH	Reflected_XSS_All_Clients	/test/b.java: 21	CxSAST
HIGH	Reflected_XSS_All_Clients	/src/xss.java: 21, 27, 35, 49, 56, 63, 70, 77, 84	CxSAST
HIGH	Run Using Upgrade Commands	/Dockerfile: 5	CxKICS
HIGH	SQL_Injection	/src/Login.java: 22, 23	CxSAST
MEDIUM	ALB Not Dropping Invalid Headers	/terraform_examples/negative2.tf: 49	CxKICS
MEDIUM	ALB Not Dropping Invalid Headers	/terraform_examples/positive1.tf: 15	CxKICS
MEDIUM	ALB Not Dropping Invalid Headers	/terraform_examples/negative1.tf: 15	CxKICS
MEDIUM	ALB Not Dropping Invalid Headers	/terraform_examples/positive2.tf: 49	CxKICS
MEDIUM	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	CxKICS
MEDIUM	CVE-2020-26137	Pip-urllib3-1.25.7	CxSCA
MEDIUM	CVE-2020-28500	Npm-lodash-4.17.11	CxSCA
MEDIUM	Cx1afa37cd-1503	Npm-node-ipc-9.2.2	CxSCA
MEDIUM	Cx2f3d7bff-d641	Npm-ua-parser-js-0.7.29	CxSCA
MEDIUM	Cx6e43c869-2623	Npm-node-ipc-9.2.2	CxSCA
MEDIUM	Cx6fc86962-e2d5	Npm-strong-type-0.1.6	CxSCA
MEDIUM	Cxba6ab5b8-2268	Npm-event-pubsub-5.0.3	CxSCA
MEDIUM	Cxc4b5c174-9b53	Npm-momnet-2.29.1	CxSCA
MEDIUM	Cxc968c171-0e5e	Npm-scs-0.0.1	CxSCA
MEDIUM	IAM Access Analyzer Undefined	/terraform_examples/negative1.tf: 1	CxKICS
MEDIUM	VPC FlowLogs Disabled	/terraform_examples/positive2.tf: 26	CxKICS
MEDIUM	VPC FlowLogs Disabled	/terraform_examples/negative2.tf: 26	CxKICS
MEDIUM	VPC Without Network Firewall	/terraform_examples/positive2.tf: 26	CxKICS
MEDIUM	VPC Without Network Firewall	/terraform_examples/negative2.tf: 26	CxKICS
LOW	ALB Deletion Protection Disabled	/terraform_examples/positive2.tf: 49	CxKICS
LOW	ALB Deletion Protection Disabled	/terraform_examples/negative2.tf: 49	CxKICS
LOW	ALB Deletion Protection Disabled	/terraform_examples/positive1.tf: 15	CxKICS
LOW	ALB Deletion Protection Disabled	/terraform_examples/negative1.tf: 15	CxKICS
LOW	EC2 Instance Using Default Security Group	/terraform_examples/positive2.tf: 83, 96, 109	CxKICS
LOW	EC2 Instance Using Default Security Group	/terraform_examples/negative2.tf: 84, 97, 110	CxKICS
LOW	Healthcheck Instruction Missing	/Dockerfile: 1	CxKICS
LOW	Shield Advanced Not In Use	/terraform_examples/positive2.tf: 49	CxKICS
LOW	Shield Advanced Not In Use	/terraform_examples/negative1.tf: 15	CxKICS
LOW	Shield Advanced Not In Use	/terraform_examples/positive1.tf: 15	CxKICS
LOW	Shield Advanced Not In Use	/terraform_examples/negative2.tf: 49	CxKICS