{ "tool": "sekuscan", "graded_by": "VulnerableApp /scanner/benchmark", "findings_sent": 346, "result": { "tool": "sekuscan", "coverage": 94.8051948051948, "totalExpected": 154, "detected": 146, "missed": 8, "unmatched": 181, "missedItems": [ { "url": "/AuthenticationVulnerability/LEVEL_4", "type": "WEAK_PASSWORD_HASHING", "cwe": "CWE-916", "wascId": "15", "method": "GET" }, { "url": "/AuthenticationVulnerability/LEVEL_5", "type": "WEAK_PASSWORD_HASHING", "cwe": "CWE-916", "wascId": "15", "method": "GET" }, { "url": "/AuthenticationVulnerability/LEVEL_6", "type": "WEAK_PASSWORD_HASHING", "cwe": "CWE-916", "wascId": "15", "method": "GET" }, { "url": "/AuthenticationVulnerability/LEVEL_8", "type": "WEAK_PASSWORD_HASHING", "cwe": "CWE-916", "wascId": "15", "method": "POST" }, { "url": "/CachePoisoning/LEVEL_3", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/UnrestrictedFileUpload/LEVEL_9", "type": "DENIAL_OF_SERVICE", "cwe": "CWE-730", "wascId": "10", "method": "POST" }, { "url": "/UnrestrictedFileUpload/LEVEL_9", "type": "PATH_TRAVERSAL", "cwe": "CWE-22", "wascId": "33", "method": "POST" }, { "url": "/PasswordResetVulnerability/LEVEL_6", "type": "WEAK_RANDOM_NUMBER_GENERATION", "cwe": "CWE-338", "method": "GET" } ], "unmatchedItems": [ { "url": "/JWTVulnerability/LEVEL_13", "type": "SERVER_SIDE_VULNERABLE_JWT", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_13", "type": "CLIENT_SIDE_VULNERABLE_JWT", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_13", "type": "INSECURE_CONFIGURATION_JWT", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_9", "type": "HEADER_INJECTION", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_9", "type": "INSECURE_CONFIGURATION_JWT", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/h2", "cwe": "CWE-548", "wascId": "16", "method": "GET" }, { "url": "/upload/sekuscan-probe.svg", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/sekuscan-probe.svg", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/sekuscan-probe.svg", "type": "REFLECTED_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/sekuscan-probe.svg", "type": "PATH_TRAVERSAL", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/sekuscan-probe.html", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/sekuscan-probe.html", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/sekuscan-probe.html", "type": "REFLECTED_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/sekuscan-probe.html", "type": "PATH_TRAVERSAL", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/UnrestrictedFileUpload/LEVEL_10", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "POST" }, { "url": "/upload/-798601691_sekuscan-probe.svg", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/-798601691_sekuscan-probe.svg", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/-798601691_sekuscan-probe.svg", "type": "REFLECTED_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/-527927781_sekuscan-probe.html", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/-527927781_sekuscan-probe.html", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/-527927781_sekuscan-probe.html", "type": "REFLECTED_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/738522991_sekuscan-probe.svg", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/738522991_sekuscan-probe.svg", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/738522991_sekuscan-probe.svg", "type": "REFLECTED_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/1397727104_sekuscan-probe.svg", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/1397727104_sekuscan-probe.svg", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/1397727104_sekuscan-probe.svg", "type": "REFLECTED_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/2028742382_sekuscan-probe.svg", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/2028742382_sekuscan-probe.svg", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/2028742382_sekuscan-probe.svg", "type": "REFLECTED_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/UnrestrictedFileUpload/LEVEL_8", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "POST" }, { "url": "/UnrestrictedFileUpload/LEVEL_9", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "POST" }, { "url": "/UnrestrictedFileUpload/LEVEL_9", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "POST" }, { "url": "/upload/-1505392695_sekuscan-probe.svg", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/-1505392695_sekuscan-probe.svg", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/-1505392695_sekuscan-probe.svg", "type": "UNCONTROLLED_RESOURCE_CONSUMPTION", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/1357745435_sekuscan-probe.html", "type": "UNRESTRICTED_FILE_UPLOAD", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/1357745435_sekuscan-probe.html", "type": "PERSISTENT_XSS", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/upload/1357745435_sekuscan-probe.html", "type": "UNCONTROLLED_RESOURCE_CONSUMPTION", "cwe": "CWE-434", "wascId": "42", "method": "GET" }, { "url": "/PathTraversal/LEVEL_14", "type": "PATH_TRAVERSAL", "cwe": "CWE-22", "wascId": "33", "method": "GET" }, { "url": "/PathTraversal/LEVEL_15", "type": "PATH_TRAVERSAL", "cwe": "CWE-22", "wascId": "33", "method": "GET" }, { "url": "/XSSInImgTagAttribute/1fvdax%3Csksfvd", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/XSSInImgTagAttribute/1irzck%3Csksirz%3Eauvoe", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/1pfslv%3Cskspfs%3Eypsnd", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/sks2gstk0", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/1lhncx%3Cskslhn%3Evdklr", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/1ljtkp%3Csksljt%3Egqlnh", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/1rfqlo%3Csksrfq%3Ewgezh", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/1scajd%3Cskssca%3Eygqak", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/1ztkxl%3Csksztk%3Ermzoa", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/sksajaj1p", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/sksi7deui", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/sksjwpm4z", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/sksqo06iv", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/Http3xxStatusCodeBasedInjection/sksxqz618", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/XSSInImgTagAttribute/1dnlyw%3Csksdnl%3Ewahug", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/XSSInImgTagAttribute/1tflbg%3Cskstfl%3Egurla", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/XSSInImgTagAttribute/sks1xfzzq", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/XSSInImgTagAttribute/sks4d1tvv", "type": "ERROR_BASED_SQL_INJECTION", "cwe": "CWE-89", "wascId": "19", "method": "GET" }, { "url": "/SSRFVulnerability/LEVEL_5", "type": "SIMPLE_SSRF", "cwe": "CWE-918", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_1", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_2", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_2", "type": "PREDICTABLE_PASSWORD_RESET_TOKEN", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_2", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "POST" }, { "url": "/PasswordResetVulnerability/LEVEL_2", "type": "PREDICTABLE_PASSWORD_RESET_TOKEN", "cwe": "CWE-640", "wascId": "1", "method": "POST" }, { "url": "/PasswordResetVulnerability/LEVEL_2", "type": "PASSWORD_RESET_TOKEN_WITHOUT_EXPIRY", "cwe": "CWE-640", "wascId": "1", "method": "POST" }, { "url": "/PasswordResetVulnerability/LEVEL_3", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "POST" }, { "url": "/PasswordResetVulnerability/LEVEL_3", "type": "PREDICTABLE_PASSWORD_RESET_TOKEN", "cwe": "CWE-640", "wascId": "1", "method": "POST" }, { "url": "/PasswordResetVulnerability/LEVEL_3", "type": "PASSWORD_RESET_TOKEN_WITHOUT_EXPIRY", "cwe": "CWE-640", "wascId": "1", "method": "POST" }, { "url": "/PasswordResetVulnerability/LEVEL_4", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_4", "type": "PREDICTABLE_PASSWORD_RESET_TOKEN", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_5", "type": "PREDICTABLE_PASSWORD_RESET_TOKEN", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_7", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/password-reset/reset.html", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/password-reset/reset.html", "type": "PASSWORD_RESET_TOKEN_EXPOSED_VIA_REFERRER", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_8", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/CryptographicFailures/LEVEL_1", "type": "PLAINTEXT_PASSWORD_STORAGE", "cwe": "CWE-256", "method": "GET" }, { "url": "/AuthenticationVulnerability/LEVEL_1", "type": "PLAINTEXT_PASSWORD_STORAGE", "cwe": "CWE-540", "method": "GET" }, { "url": "/AuthenticationVulnerability/LEVEL_10", "cwe": "CWE-1391", "method": "POST" }, { "url": "/AuthenticationVulnerability/LEVEL_8", "cwe": "CWE-1391", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_1", "type": "PREDICTABLE_SESSION_ID", "cwe": "CWE-330", "wascId": "11", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_1/profile", "type": "PREDICTABLE_SESSION_ID", "cwe": "CWE-330", "wascId": "11", "method": "GET" }, { "url": "/SessionManagementVulnerability/LEVEL_2/profile", "type": "PREDICTABLE_SESSION_ID", "cwe": "CWE-330", "wascId": "11", "method": "GET" }, { "url": "/SessionManagementVulnerability/LEVEL_3/profile", "type": "OBSCURED_PREDICTABLE_SESSION_ID", "cwe": "CWE-330", "wascId": "11", "method": "GET" }, { "url": "/IDORVulnerability/LEVEL_1", "cwe": "CWE-200", "wascId": "13", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_1", "cwe": "CWE-200", "wascId": "13", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_3", "cwe": "CWE-200", "wascId": "13", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_6", "cwe": "CWE-200", "wascId": "13", "method": "POST" }, { "url": "/", "type": "USE_OF_BROKEN_CRYPTOGRAPHIC_ALGORITHM", "cwe": "CWE-540", "method": "GET" }, { "url": "/allEndPointJson", "type": "USE_OF_BROKEN_CRYPTOGRAPHIC_ALGORITHM", "cwe": "CWE-540", "method": "GET" }, { "url": "/password-reset/reset.html", "type": "USE_OF_BROKEN_CRYPTOGRAPHIC_ALGORITHM", "cwe": "CWE-540", "method": "GET" }, { "url": "/CommandInjection/LEVEL_2", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/IDORVulnerability/LEVEL_3", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_10", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_13", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_14", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_16", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_2", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_3", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_4", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_5", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_6", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_8", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_9", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/LDAPInjectionVulnerability/LEVEL_3", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/LDAPInjectionVulnerability/LEVEL_4", "type": "REFLECTED_XSS", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_10", "cwe": "CWE-307", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_8", "cwe": "CWE-307", "method": "GET" }, { "url": "/SessionManagementVulnerability/LEVEL_6", "cwe": "CWE-307", "method": "POST" }, { "url": "/", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/AuthenticationVulnerability/LEVEL_1/Auth.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/allEndPointJson", "cwe": "CWE-1021", "method": "GET" }, { "url": "/password-reset/reset.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/BlindSQLInjectionVulnerability/LEVEL_1/SQLInjection_Level1.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/CachePoisoning/LEVEL_1/CachePoisoning.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/ClickjackingVulnerability/LEVEL_1/ClickjackingVulnerability.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/ClickjackingVulnerability/LEVEL_1/ClickjackingVulnerability.js", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/CommandInjection/LEVEL_1/CI_Level1.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/CryptographicFailures/LEVEL_1/CryptographicFailures.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/ErrorBasedSQLInjectionVulnerability/LEVEL_1/SQLInjection_Level1.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/IDORVulnerability/LEVEL_1/IDOR.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/JWTVulnerability/LEVEL_1/JWT_Level1.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/LDAPInjectionVulnerability/LEVEL_1/LDAP.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/PasswordResetVulnerability/Common/PasswordReset.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/PathTraversal/LEVEL_1/PathTraversal.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/PersistentXSSInHTMLTagVulnerability/LEVEL_1/PersistentXSS.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/SessionManagementVulnerability/LEVEL_1/SessionManagement.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/UnrestrictedFileUpload/LEVEL_1/FileUpload.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/XSSInImgTagAttribute/LEVEL_1/XSS.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/XSSWithHtmlTagInjection/LEVEL_1/XSS.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/templates/XXEVulnerability/LEVEL_1/XXE.html", "cwe": "CWE-1021", "method": "GET" }, { "url": "/", "cwe": "CWE-319", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_14", "type": "CLIENT_SIDE_VULNERABLE_JWT", "cwe": "CWE-347", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_16", "type": "CLIENT_SIDE_VULNERABLE_JWT", "cwe": "CWE-347", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_2", "type": "INSECURE_CONFIGURATION_JWT", "cwe": "CWE-347", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_3", "type": "INSECURE_CONFIGURATION_JWT", "cwe": "CWE-347", "wascId": "37", "method": "GET" }, { "url": "/password-reset/reset.html", "cwe": "CWE-319", "wascId": "37", "method": "GET" }, { "url": "/PersistentXSSInHTMLTagVulnerability/LEVEL_7", "cwe": "CWE-79", "wascId": "8", "method": "GET" }, { "url": "/CachePoisoning/LEVEL_4", "cwe": "CWE-524", "method": "GET" }, { "url": "/CachePoisoning/LEVEL_1", "type": "HEADER_INJECTION", "cwe": "CWE-441", "method": "GET" }, { "url": "/CachePoisoning/LEVEL_2", "type": "HEADER_INJECTION", "cwe": "CWE-441", "method": "GET" }, { "url": "/CachePoisoning/LEVEL_3", "type": "HEADER_INJECTION", "cwe": "CWE-441", "method": "GET" }, { "url": "/CachePoisoning/LEVEL_4", "type": "HEADER_INJECTION", "cwe": "CWE-441", "method": "GET" }, { "url": "/XXEVulnerability/LEVEL_3", "type": "XXE", "cwe": "CWE-611", "wascId": "43", "method": "POST" }, { "url": "/XXEVulnerability/LEVEL_7", "type": "XXE", "cwe": "CWE-611", "wascId": "43", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_2", "cwe": "CWE-200", "wascId": "13", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_4", "cwe": "CWE-200", "wascId": "13", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_5", "cwe": "CWE-200", "wascId": "13", "method": "POST" }, { "url": "/PersistentXSSInHTMLTagVulnerability/LEVEL_1", "cwe": "CWE-352", "wascId": "9", "method": "GET" }, { "url": "/SessionManagementVulnerability/LEVEL_1/profile", "type": "MISSING_LOGOUT_INVALIDATION", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/SessionManagementVulnerability/LEVEL_2", "type": "MISSING_LOGOUT_INVALIDATION", "cwe": "CWE-384", "wascId": "37", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_2/profile", "type": "MISSING_LOGOUT_INVALIDATION", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/SessionManagementVulnerability/LEVEL_3", "type": "MISSING_LOGOUT_INVALIDATION", "cwe": "CWE-384", "wascId": "37", "method": "POST" }, { "url": "/SessionManagementVulnerability/LEVEL_3/profile", "type": "MISSING_LOGOUT_INVALIDATION", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/SessionManagementVulnerability/LEVEL_4/profile", "type": "MISSING_LOGOUT_INVALIDATION", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_10", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_6", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/PasswordResetVulnerability/LEVEL_9", "type": "INSECURE_PASSWORD_RESET_LINK", "cwe": "CWE-640", "wascId": "1", "method": "GET" }, { "url": "/BlindSQLInjectionVulnerability/LEVEL_2", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/BlindSQLInjectionVulnerability/LEVEL_4", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/BlindSQLInjectionVulnerability/LEVEL_5", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/ErrorBasedSQLInjectionVulnerability/LEVEL_3", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/ErrorBasedSQLInjectionVulnerability/LEVEL_4", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_7", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/UnionBasedSQLInjectionVulnerability/LEVEL_2", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/UnionBasedSQLInjectionVulnerability/LEVEL_3", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/UnionBasedSQLInjectionVulnerability/LEVEL_5", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/UnionBasedSQLInjectionVulnerability/LEVEL_6", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/UnionBasedSQLInjectionVulnerability/LEVEL_7", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/UnionBasedSQLInjectionVulnerability/LEVEL_8", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/UnionBasedSQLInjectionVulnerability/LEVEL_9", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/", "type": "CLIENT_SIDE_VULNERABLE_JWT", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/", "type": "INSECURE_CONFIGURATION_JWT", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_1", "type": "INSECURE_CONFIGURATION_JWT", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_7", "type": "INSECURE_CONFIGURATION_JWT", "cwe": "CWE-384", "wascId": "37", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_2", "cwe": "CWE-1004", "wascId": "13", "method": "GET" }, { "url": "/", "cwe": "CWE-1004", "wascId": "13", "method": "GET" }, { "url": "/BlindSQLInjectionVulnerability/LEVEL_1", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/BlindSQLInjectionVulnerability/LEVEL_3", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/JWTVulnerability/LEVEL_1", "cwe": "CWE-209", "wascId": "13", "method": "GET" }, { "url": "/UnionBasedSQLInjectionVulnerability/LEVEL_1", "cwe": "CWE-209", "wascId": "13", "method": "GET" } ] }, "by_type": [ { "type": "WEAK_PASSWORD_HASHING", "expected": 5, "detected": 1, "missed": 4 }, { "type": "DENIAL_OF_SERVICE", "expected": 1, "detected": 0, "missed": 1 }, { "type": "PATH_TRAVERSAL", "expected": 15, "detected": 14, "missed": 1 }, { "type": "REFLECTED_XSS", "expected": 18, "detected": 17, "missed": 1 }, { "type": "WEAK_RANDOM_NUMBER_GENERATION", "expected": 1, "detected": 0, "missed": 1 }, { "type": "BLIND_SQL_INJECTION", "expected": 2, "detected": 2, "missed": 0 }, { "type": "CLICKJACKING", "expected": 5, "detected": 5, "missed": 0 }, { "type": "CLIENT_SIDE_VULNERABLE_JWT", "expected": 10, "detected": 10, "missed": 0 }, { "type": "COMMAND_INJECTION", "expected": 5, "detected": 5, "missed": 0 }, { "type": "ERROR_BASED_SQL_INJECTION", "expected": 5, "detected": 5, "missed": 0 }, { "type": "HEADER_INJECTION", "expected": 1, "detected": 1, "missed": 0 }, { "type": "INSECURE_CONFIGURATION_JWT", "expected": 3, "detected": 3, "missed": 0 }, { "type": "INSECURE_CRYPTOGRAPHIC_STORAGE", "expected": 2, "detected": 2, "missed": 0 }, { "type": "INSECURE_DIRECT_OBJECT_REFERENCE", "expected": 4, "detected": 4, "missed": 0 }, { "type": "INSECURE_PASSWORD_RESET_LINK", "expected": 1, "detected": 1, "missed": 0 }, { "type": "LDAP_INJECTION", "expected": 4, "detected": 4, "missed": 0 }, { "type": "MISSING_LOGOUT_INVALIDATION", "expected": 1, "detected": 1, "missed": 0 }, { "type": "NO_LOGIN_RATE_LIMITING", "expected": 2, "detected": 2, "missed": 0 }, { "type": "OBSCURED_PREDICTABLE_SESSION_ID", "expected": 1, "detected": 1, "missed": 0 }, { "type": "OPEN_REDIRECT_3XX_STATUS_CODE", "expected": 9, "detected": 9, "missed": 0 }, { "type": "PASSWORD_RESET_TOKEN_EXPOSED_VIA_REFERRER", "expected": 1, "detected": 1, "missed": 0 }, { "type": "PASSWORD_RESET_TOKEN_WITHOUT_EXPIRY", "expected": 1, "detected": 1, "missed": 0 }, { "type": "PERSISTENT_XSS", "expected": 13, "detected": 13, "missed": 0 }, { "type": "PLAINTEXT_PASSWORD_STORAGE", "expected": 2, "detected": 2, "missed": 0 }, { "type": "PREDICTABLE_PASSWORD_RESET_TOKEN", "expected": 2, "detected": 2, "missed": 0 }, { "type": "PREDICTABLE_SESSION_ID", "expected": 1, "detected": 1, "missed": 0 }, { "type": "REUSABLE_PASSWORD_RESET_TOKEN", "expected": 1, "detected": 1, "missed": 0 }, { "type": "SERVER_SIDE_VULNERABLE_JWT", "expected": 6, "detected": 6, "missed": 0 }, { "type": "SESSION_FIXATION", "expected": 1, "detected": 1, "missed": 0 }, { "type": "SIMPLE_SSRF", "expected": 4, "detected": 4, "missed": 0 }, { "type": "UNCONTROLLED_RESOURCE_CONSUMPTION", "expected": 1, "detected": 1, "missed": 0 }, { "type": "UNION_BASED_SQL_INJECTION", "expected": 2, "detected": 2, "missed": 0 }, { "type": "UNRESTRICTED_FILE_UPLOAD", "expected": 7, "detected": 7, "missed": 0 }, { "type": "USERNAME_ENUMERATION", "expected": 2, "detected": 2, "missed": 0 }, { "type": "USE_OF_BROKEN_CRYPTOGRAPHIC_ALGORITHM", "expected": 3, "detected": 3, "missed": 0 }, { "type": "WEAK_CRYPTOGRAPHIC_HASH", "expected": 5, "detected": 5, "missed": 0 }, { "type": "WEB_CACHE_POISONING", "expected": 4, "detected": 4, "missed": 0 }, { "type": "XXE", "expected": 3, "detected": 3, "missed": 0 } ], "provenance": { "engine_commit": "7166b5a", "tree": "clean", "measured_at": "2026-09-21T20:11:49+00:00", "host": "Linux 6.8.0-139-generic x86_64", "run_id": "run_2ff62c89dcb94243", "run_status": "partial", "coverage_status": "partial", "actions": 46099, "probes": 45396, "duration_seconds": 2297.07, "check_failures": 0, "allocation_skips": 1 } }