Code Security Finding: Trust Boundary Violation (CWE-501, Medium Severity) in DefaultLoginServlet.java:97

[joshn-whitesource-app]

Code Security Finding

This finding was first detected on 2023-12-06 01:34pm GMT and is still present in the last scan performed on 2024-02-15 10:26pm GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
Medium	Trust Boundary Violation	CWE-501	DefaultLoginServlet.java:97	1
Vulnerable Code easybuggy/src/main/java/org/t246osslab/easybuggy/core/servlets/DefaultLoginServlet.java Lines 92 to 97 in b9f2abf } else if (authUser(userid, password)) { /* Reset account lock count */ resetAccountLock(userid); session.setAttribute("authNMsg", "authenticated"); session.setAttribute("userid", userid); 1 Data Flow/s detected 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk