server
server copied to clipboard
Published
20 hours ago •
bitwarden
bitwarden
[deps] Vault: Update aspnet-health-checks monorepo
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| AspNetCore.HealthChecks.SqlServer | 8.0.0 -> 8.0.2 |
||||
| AspNetCore.HealthChecks.Uris | 8.0.0 -> 8.0.1 |
Configuration
📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- [ ] If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
![renovate[bot] avatar](https://avatars.githubusercontent.com/in/2740?v=4 "Published by a pub.dev verified publisher"){kind=small}
Internal tracking:
- ID: PM-8413
- Link: https://bitwarden.atlassian.net/browse/PM-8413
Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 41.57%. Comparing base (
a1e4e47) to head (5437151). Report is 1 commits behind head on main.
Additional details and impacted files
@@ Coverage Diff @@
## main #4132 +/- ##
=======================================
Coverage 41.57% 41.57%
=======================================
Files 1357 1357
Lines 64056 64056
Branches 5891 5891
=======================================
Hits 26631 26631
Misses 36208 36208
Partials 1217 1217
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
![codecov[bot] avatar](https://avatars.githubusercontent.com/in/254?v=4 "Published by a pub.dev verified publisher"){kind=small}
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️ Warning: custom changes will be lost.
Checkmarx One – Scan Summary & Details – 1fbd8d62-aefe-444b-80d2-7fc174d02ae9
New Issues
| Severity | Issue | Source File / Package | Checkmarx Insight |
|---|---|---|---|
 |
CSRF | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
CSRF | /src/Api/Billing/Controllers/OrganizationsController.cs: 105 | Attack Vector |
|
CSRF | /src/Api/Billing/Controllers/OrganizationsController.cs: 49 | Attack Vector |
|
CSRF | /src/Api/SecretsManager/Controllers/SecretsController.cs: 79 | Attack Vector |
|
CSRF | /src/Api/SecretsManager/Controllers/SecretsController.cs: 128 | Attack Vector |
|
CSRF | /src/Api/SecretsManager/Controllers/SecretsTrashController.cs: 32 | Attack Vector |
|
Privacy_Violation | /src/Core/Models/Data/UserWithCalculatedPremium.cs: 26 | Attack Vector |
|
Privacy_Violation | /src/Core/Models/Data/UserWithCalculatedPremium.cs: 18 | Attack Vector |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 1293 | Attack Vector |
 |
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Api/AdminConsole/Controllers/ProvidersController.cs: 72 | Attack Vector |
|
Log_Forging | /src/Api/AdminConsole/Controllers/ProvidersController.cs: 72 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/StripeController.cs: 164 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/StripeController.cs: 164 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Identity/Billing/Controller/AccountsController.cs: 23 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/StripeController.cs: 164 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/StripeController.cs: 164 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Billing/Controllers/RecoveryController.cs: 38 | Attack Vector |
|
Log_Forging | /src/Api/Billing/Controllers/ProviderBillingController.cs: 52 | Attack Vector |
Fixed Issues
| Severity | Issue | Source File / Package |
|---|---|---|
|
CSRF | /src/Api/Controllers/CollectionsController.cs: 247 |
|
CSRF | /src/Api/Auth/Controllers/TwoFactorController.cs: 118 |
|
CSRF | /src/Api/Auth/Controllers/AccountsController.cs: 366 |
|
CSRF | /src/Billing/Controllers/StripeController.cs: 176 |
|
CSRF | /src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 43 |
|
CSRF | /src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 43 |
|
CSRF | /src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 43 |
|
CSRF | /src/Api/Controllers/CollectionsController.cs: 247 |
|
CSRF | /src/Api/AdminConsole/Controllers/GroupsController.cs: 238 |
|
Privacy_Violation | /src/Api/Vault/Models/Request/CipherRequestModel.cs: 198 |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 860 |
|
Privacy_Violation | /src/Core/Auth/UserFeatures/TdeOffboardingPassword/TdeOffboardingPasswordCommand.cs: 81 |
|
Privacy_Violation | /src/Api/Auth/Controllers/TwoFactorController.cs: 380 |
|
Privacy_Violation | /src/Api/Vault/Models/Request/CipherRequestModel.cs: 198 |
|
Privacy_Violation | /src/Core/Auth/UserFeatures/UserMasterPassword/SetInitialMasterPasswordCommand.cs: 59 |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 522 |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 577 |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 718 |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 771 |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 575 |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 744 |
|
Privacy_Violation | /src/Core/Services/Implementations/UserService.cs: 773 |
|
Log_Forging | /src/Notifications/Controllers/SendController.cs: 27 |
|
Log_Forging | /bitwarden_license/src/Scim/Controllers/v2/UsersController.cs: 114 |
|
Log_Forging | /bitwarden_license/src/Scim/Controllers/v2/GroupsController.cs: 98 |
|
Log_Forging | /src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 456 |
|
Log_Forging | /src/Notifications/Controllers/SendController.cs: 27 |
|
Log_Forging | /src/Api/Vault/Controllers/CiphersController.cs: 574 |
|
Log_Forging | /src/Api/Vault/Controllers/CiphersController.cs: 553 |
|
Log_Forging | /src/Api/Auth/Controllers/TwoFactorController.cs: 349 |
|
Log_Forging | /src/Api/Vault/Controllers/CiphersController.cs: 603 |
|
Log_Forging | /src/Api/Vault/Controllers/CiphersController.cs: 530 |
|
Log_Forging | /bitwarden_license/src/Scim/Controllers/v2/UsersController.cs: 114 |
|
Log_Forging | /bitwarden_license/src/Scim/Controllers/v2/GroupsController.cs: 98 |
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}