Code Security Finding: Unvalidated/Open Redirect (CWE-601, Low Severity) in OpenRedirectServlet.java:64

[joshn-whitesource-app]

Code Security Finding

This finding was first detected on 2023-12-06 01:34pm GMT and is still present in the last scan performed on 2024-02-15 10:26pm GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
Low	Unvalidated/Open Redirect	CWE-601	OpenRedirectServlet.java:64	2
Vulnerable Code easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/OpenRedirectServlet.java Lines 59 to 64 in b9f2abf } else { /* account lock count +1 */ incrementLoginFailedCount(userid); session.setAttribute("authNMsg", getErrMsg("msg.authentication.fail", locale)); res.sendRedirect("/openredirect/login" + loginQueryString); 2 Data Flow/s detected View Data Flow 1 View Data Flow 2 Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Unvalidated/Open Redirect Training ● Videos    ▪ Secure Code Warrior Unvalidated/Open Redirect Video ● Further Reading    ▪ OWASP Unvalidated Redirects and Forwards Cheat Sheet 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk