VulnerableApp
VulnerableApp copied to clipboard
Marking Vulnerability Variant as Secure for Http3xxStatusCodeBasedInjection Vulnerability
Describe the bug There are few levels in Http3xxStatusCodeBasedInjection Vulnerability which are a secure implementation so we need to add the Secure variant to the Annotation. This bug also includes that exploiting all the levels and in case there are some levels that are not exploitable, marking them as secure.
To Reproduce Try exploiting the vulnerability.
Expected behavior Once a level is marked as secure then the UI will show the locked icon instead of unlocked icon. E.g:
** How to fix the issue ** Visit the file for the Vulnerability and change the annotation variant.
Annotation definition: https://github.com/SasanLabs/VulnerableApp/blob/master/src/main/java/org/sasanlabs/service/vulnerability/openRedirect/Http3xxStatusCodeBasedInjection.java#L246 https://github.com/SasanLabs/VulnerableApp/blob/master/src/main/java/org/sasanlabs/internal/utility/annotations/VulnerableAppRequestMapping.java#L31