covid-19-jurnal-medical

covid-19-jurnal-medical copied to clipboard

When I am in my profile and I click on the fill in the form option i am taken to a page with a button that leads me to the...

overeha

Implement change email feature

1

An attacker that obtains access to a compromised user account can both prevent and further maintain access to the victim user's account when the application does not offer the possibility...

RaduCStefanescu

Inform user on account modification

3

User is not informed by email upon the medical modifications made on his/her profile When changes upon the medical profile of the user are performed, no notification regarding these changes...

RaduCStefanescu

Only show install extension item in sidebar if user has matching browser

7

### What does it fix? Partially addresses #367 (in order to also display an icon as suggested, we'd need to first modify [InstrumentsItem](https://github.com/code4romania/taskforce-fe-components/blob/master/src/components/instruments-item/instruments-item.js)) The install extension item is only shown...

GabrielMajeri

Add delete user identity server endpoint and delete profile and forms api endpoint

4

### What does it fix? Closes #418 1. Added API endpoint that deletes the user profile and its forms, as well as its family members profiles and forms 2. Added...

irinel-nistor

Redundant browser extension install sidebar component

2

Decide based on the browser I am using which "store" I should be redirected to. Don't keep two extremely similar functionalities on the top of the COVID-19 related links -...

bvizureanu

Implement change password feature

1

Missing change password feature within the application. An attacker that obtains access to a compromised user account can perform malicious actions upon victims accounts when the application does not offer...

RaduCStefanescu

Credentials are stored on GIT repository

2

An attacker or a malicious administrative user with access to the GIT platform or the GIT repository can obtain or create a public leak of a wide range of credentials...

RaduCStefanescu

Update yargs-parser version

1

Affected versions of yargs-parser are vulnerable to prototype pollution. Arguments are not properly sanitized, allowing an attacker to modify the prototype of Object, causing the addition or modification of an...

RaduCStefanescu

By using the https://prod-api.stamacasa.ro/api/profile/family/ IDOR an attacker is able to stop all users from receiving daily emails, as they are only sent to users without the ParentId set. `backend/src/StamAcasa.Common/Notifications/AssessmentNotificationsDispatch.cs`

RaduCStefanescu