VulnerableApp

VulnerableApp copied to clipboard

merry-degaga

Currently docker images are not versioned which can be an issue going further

7

**Is your feature request related to a problem? Please describe.** Docker images for VulnerableApp have just 2 versions latest and unreleased. It should be latest (whcih is unreleased) and specific...

preetkaran20

**Is your feature request related to a problem? Please describe.** In the SSRF vulnerability, we have added the support for AWS metadata service based attack but there are many cloud...

preetkaran20

Possibility to translate the application into other language

1

Hello guy, I would like to be able to translate the application into French. I am working on this translation by adding a file "VulnerableApp/src/main/resources/i18n/messages_fr_FR.properties", based on the VulnerableApp/src/main/resources/i18n/messages_en_US.properties file....

massot-c

Fixing issues in XSSWithHtmlTagInjection Vulnerability

2

**Is your feature request related to a problem? Please describe.** XSSWithHtmlTagInjection vulnerability is handled in the backend at: https://github.com/SasanLabs/VulnerableApp/blob/ed98eb0923893ea822761cca3e7d0969b0eb340d/src/main/java/org/sasanlabs/service/vulnerability/xss/reflected/UrlParamBasedHtmlTagInjection.java It has the following issues: 1. Class name doesn't match the...

preetkaran20

Adding new level in Unrestricted File upload which doesn't have a check on size of file uploaded

7

**Is your feature request related to a problem? Please describe.** Currently there is no level in Unrestricted File Upload which doesn't have a check on size of file uploaded. **Describe...

preetkaran20

- Nimbus jose jwt library upgrade due to vulnerabilities https://mvnrepository.com/artifact/com.nimbusds/nimbus-jose-jwt/8.3 https://github.com/advisories/GHSA-g5vf-v6wf-7w2r https://github.com/advisories/GHSA-269g-pwp5-87pp

SampathKumarAmex

[Sonar Source] Adding support of providing Vulnerability definition for SAST tools

21

**Is your feature request related to a problem? Please describe.** Similar to the Vulnerability definition we provide for DAST, we need to add the support for SAST tools too. Along...

preetkaran20

For Unrestricted FileUpload, indicate the file was too large to upload

12

**Is your feature request related to a problem? Please describe.** Currently, VulnerableApp's UnrestrictedFileUpload vulnerability is not having any indicator for telling users that the uploaded file is too large which...

preetkaran20

I modified the function so that when file larger than 10mb is uploaded, it will be rejected and some warn message will be displayed on the UI I have no...

agnarrarendelle