OWASP Full Scan

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Content-Type Header Missing [10019] total: 1:
    • http://localhost:3000/
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-favicon-32x32.png
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-favicon-32x32.png
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-favicon-32x32.png
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-favicon-32x32.png

  Ignored Alerts

  • Absence of Anti-CSRF Tokens [10202] total: 4:
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
  • Vulnerable JS Library [10003] total: 1:
  • Full Path Disclosure [110009] total: 3:
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 1:
  • Timestamp Disclosure - Unix [10096] total: 7:
  • Base64 Disclosure [10094] total: 6:
  • Information Disclosure - Suspicious Comments [10027] total: 4:
  • Modern Web Application [10109] total: 4:
  • Non-Storable Content [10049] total: 4:
  • Storable and Cacheable Content [10049] total: 2:
  • Storable but Non-Cacheable Content [10049] total: 5:

View the following link to download the report.
RunnerID:18843510156

---

ZAP by Checkmarx

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:

View the following link to download the report.
RunnerID:19545228262

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-apple-touch-icon.png
    • http://localhost:3000/icons/bcid-favicon-16x16.png
  • Sec-Fetch-Mode Header is Missing [90005] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-apple-touch-icon.png
    • http://localhost:3000/icons/bcid-favicon-16x16.png
  • Sec-Fetch-Site Header is Missing [90005] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-apple-touch-icon.png
    • http://localhost:3000/icons/bcid-favicon-16x16.png
  • Sec-Fetch-User Header is Missing [90005] total: 4:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-apple-touch-icon.png
    • http://localhost:3000/icons/bcid-favicon-16x16.png

  Ignored Alerts

  • Full Path Disclosure [110009] total: 3:
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 1:
  • Base64 Disclosure [10094] total: 6:
  • Non-Storable Content [10049] total: 4:
  • Storable and Cacheable Content [10049] total: 2:
  • Storable but Non-Cacheable Content [10049] total: 5:

View the following link to download the report.
RunnerID:19545229210

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • http://localhost:3000/applicantportal

  Ignored Alerts

  • Application Error Disclosure [90022] total: 1:

View the following link to download the report.
RunnerID:19676870225

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:

  Ignored Alerts

  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 1:

View the following link to download the report.
RunnerID:19676928714

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:

View the following link to download the report.
RunnerID:20275045825

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-favicon-32x32.png
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-favicon-32x32.png
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-favicon-32x32.png
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:3000/
    • http://localhost:3000/applicantportal
    • http://localhost:3000/icons/bcid-favicon-32x32.png

  Ignored Alerts

  • Full Path Disclosure [110009] total: 3:
  • Base64 Disclosure [10094] total: 6:

View the following link to download the report.
RunnerID:20275828250

[github-actions]

• Site: http://localhost:3000
  New Alerts
  • PII Disclosure [10062] total: 1:
    • http://localhost:3000/applicantportal

View the following link to download the report.
RunnerID:20321584385

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts
  • PII Disclosure [10062] total: 1:

View the following link to download the report.
RunnerID:20342677008

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • http://localhost:3000/applicantportal

  Ignored Alerts

  • Application Error Disclosure [90022] total: 1:

View the following link to download the report.
RunnerID:20924754539

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:

  Ignored Alerts

  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 1:

View the following link to download the report.
RunnerID:20924820788

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • http://localhost:3000/applicantportal

  Ignored Alerts

  • Application Error Disclosure [90022] total: 1:

View the following link to download the report.
RunnerID:20974568262

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:

  Ignored Alerts

  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 1:

View the following link to download the report.
RunnerID:21002074223

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • http://localhost:3000/applicantportal

  Ignored Alerts

  • Application Error Disclosure [90022] total: 1:

View the following link to download the report.
RunnerID:21038382594

[github-actions]

• Site: http://localhost:3000
  Resolved Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:

  Ignored Alerts

  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 1:

View the following link to download the report.
RunnerID:21038634626

[github-actions]

• Site: http://localhost:3000
  New Alerts

  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • http://localhost:3000/applicantportal

  Ignored Alerts

  • Application Error Disclosure [90022] total: 1:

View the following link to download the report.
RunnerID:21048137743