Bugsy

DEMO
Back to Marketing
DU

Demo User

demo@acmebank.com

Back to Projects

Customer Portal Frontend

React-based customer dashboard for account management and transactions

Project Details

Repository
github.com/acmebank/customer-portal
Framework
React
Languages
TypeScriptCSS
Last Scan
4/16/2024
completed

Security Findings

2
Critical
3
High
8
Medium
4
Low
17
Total Findings

Security Findings (17 of 17)

SQL Injection Vulnerability in User Authentication

Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.

critical
src/auth/login.ts:15
Injection Attack
97% confidence

SQL Injection Vulnerability in User Authentication

Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.

critical
src/auth/login.ts:15
Injection Attack
74% confidence

Cross-Site Scripting (XSS) in User Profile Display

Rendering unsanitized user input directly into DOM allows script injection attacks. Attackers can steal session cookies, perform unauthorized actions, or redirect users to malicious sites.

high
components/UserProfile.tsx:23
Cross-Site Scripting
81% confidence

Cross-Site Scripting (XSS) in User Profile Display

Rendering unsanitized user input directly into DOM allows script injection attacks. Attackers can steal session cookies, perform unauthorized actions, or redirect users to malicious sites.

high
components/UserProfile.tsx:23
Cross-Site Scripting
88% confidence

Cross-Site Scripting (XSS) in User Profile Display

Rendering unsanitized user input directly into DOM allows script injection attacks. Attackers can steal session cookies, perform unauthorized actions, or redirect users to malicious sites.

high
components/UserProfile.tsx:23
Cross-Site Scripting
95% confidence

Excessive File System Permissions Violate Least Privilege

Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.

medium
scripts/deploy.sh:23
Access Control
72% confidence

Excessive File System Permissions Violate Least Privilege

Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.

medium
scripts/deploy.sh:23
Access Control
79% confidence

Excessive File System Permissions Violate Least Privilege

Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.

medium
scripts/deploy.sh:23
Access Control
86% confidence

Excessive File System Permissions Violate Least Privilege

Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.

medium
scripts/deploy.sh:23
Access Control
93% confidence

Excessive File System Permissions Violate Least Privilege

Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.

medium
scripts/deploy.sh:23
Access Control
70% confidence

Excessive File System Permissions Violate Least Privilege

Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.

medium
scripts/deploy.sh:23
Access Control
77% confidence

Excessive File System Permissions Violate Least Privilege

Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.

medium
scripts/deploy.sh:23
Access Control
84% confidence

Excessive File System Permissions Violate Least Privilege

Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.

medium
scripts/deploy.sh:23
Access Control
91% confidence

SQL Injection Vulnerability in User Authentication

Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.

low
src/auth/login.ts:15
Injection Attack
98% confidence

SQL Injection Vulnerability in User Authentication

Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.

low
src/auth/login.ts:15
Injection Attack
75% confidence

SQL Injection Vulnerability in User Authentication

Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.

low
src/auth/login.ts:15
Injection Attack
82% confidence

SQL Injection Vulnerability in User Authentication

Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.

low
src/auth/login.ts:15
Injection Attack
89% confidence