ZAP Full Scan Report #322

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 108:

View the following link to download the report.
RunnerID:5392666509

github-actions · 2023-06-29T22:04:47Z

Site: https://mychildcareservices.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 69:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://mychildcareservices.gov.bc.ca/js/app~b88f4497.2f78d444.js
  - https://mychildcareservices.gov.bc.ca/js/app~ec90a4dd.a2b2e520.js
- Cookie Slack Detector [90027] total: 69:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 5:
- Non-Storable Content [10049] total: 12:
- User Agent Fuzzer [10104] total: 132:

View the following link to download the report.
RunnerID:5417068568

github-actions · 2023-07-06T18:19:02Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 67:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://test.mychildcareservices.gov.bc.ca
  - https://test.mychildcareservices.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://test.mychildcareservices.gov.bc.ca/js/app~b88f4497.55c0194a.js
  - https://test.mychildcareservices.gov.bc.ca/js/app~ec90a4dd.520c653f.js
- Cookie Slack Detector [90027] total: 67:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 13:

View the following link to download the report.
RunnerID:5478734896

github-actions · 2023-09-18T22:09:23Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Session Management Response Identified [10112] total: 3:

View the following link to download the report.
RunnerID:6228484698

github-actions · 2023-09-18T22:10:42Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6228483993

github-actions · 2023-10-05T00:25:12Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Hidden File Found [40035] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/.hg

View the following link to download the report.
RunnerID:6412981536

github-actions · 2023-10-05T00:27:09Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 1:
- User Agent Fuzzer [10104] total: 434:

View the following link to download the report.
RunnerID:6413013844

github-actions · 2023-10-13T20:12:22Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 276:

View the following link to download the report.
RunnerID:6512585069

github-actions · 2023-10-20T22:18:08Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 276:

View the following link to download the report.
RunnerID:6593180823

github-actions · 2023-10-24T20:15:48Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Path Traversal [6] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/error?message=%2Ferror
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 420:

View the following link to download the report.
RunnerID:6631973929

github-actions · 2023-10-25T20:32:29Z

Site: https://mychildcareservices.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 70:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 2:
  - https://mychildcareservices.gov.bc.ca/js/app~b88f4497.55c0194a.js
  - https://mychildcareservices.gov.bc.ca/js/app~ec90a4dd.520c653f.js
- Cookie Slack Detector [90027] total: 70:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 13:
- Session Management Response Identified [10112] total: 6:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6645767619

github-actions · 2023-11-15T23:03:55Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 83:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/js/app~705bc638.f068dc77.js
- Cookie Slack Detector [90027] total: 83:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 12:
- Session Management Response Identified [10112] total: 6:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:6883892934

github-actions · 2023-12-01T21:15:16Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Hidden File Found [40035] total: 4:

View the following link to download the report.
RunnerID:7065201281

github-actions · 2023-12-01T21:16:18Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 576:

View the following link to download the report.
RunnerID:7065252265

github-actions · 2023-12-08T21:39:10Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7146474573

github-actions · 2023-12-08T21:40:57Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7146477929

github-actions · 2023-12-12T22:17:51Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7187854227

github-actions · 2023-12-13T22:39:47Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7201893886

github-actions · 2023-12-13T22:40:58Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7201866885

github-actions · 2023-12-14T19:08:11Z

Site: https://mychildcareservices.gov.bc.ca
New Alerts
- Backup File Disclosure [10095] total: 34:
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 84:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://mychildcareservices.gov.bc.ca/js/app~705bc638.f068dc77.js
- Cookie Slack Detector [90027] total: 84:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 13:
- Session Management Response Identified [10112] total: 6:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7213364326

github-actions · 2023-12-15T06:33:00Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 5:
- CSP: style-src unsafe-inline [10055] total: 5:
- Proxy Disclosure [40025] total: 78:
- Sub Resource Integrity Attribute Missing [90003] total: 10:
- Cookie with SameSite Attribute None [10054] total: 2:
  - https://test.mychildcareservices.gov.bc.ca
  - https://test.mychildcareservices.gov.bc.ca/
- Deprecated Feature Policy Header Set [10063] total: 11:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/js/app~12b01a4e.3d70bafc.js
- Cookie Slack Detector [90027] total: 78:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 11:
- Session Management Response Identified [10112] total: 3:

View the following link to download the report.
RunnerID:7218783221

github-actions · 2023-12-22T19:11:58Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Path Traversal [6] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/error?message=%5Cerror
- SQL Injection [40018] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found+AND+1%3D1+--+
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 204:

View the following link to download the report.
RunnerID:7303070739

github-actions · 2023-12-22T19:13:50Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Path Traversal [6] total: 1:
- SQL Injection [40018] total: 1:
- Cross-Domain Misconfiguration [10098] total: 1:
- Hidden File Found [40035] total: 4:
- User Agent Fuzzer [10104] total: 204:

View the following link to download the report.
RunnerID:7303105606

github-actions · 2023-12-29T22:10:24Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Path Traversal [6] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/error?message=error
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/api
- User Agent Fuzzer [10104] total: 24:

View the following link to download the report.
RunnerID:7360093591

github-actions · 2023-12-29T22:10:36Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Path Traversal [6] total: 1:
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 24:

View the following link to download the report.
RunnerID:7360114111

github-actions · 2024-01-02T23:18:05Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Path Traversal [6] total: 1:
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 24:

View the following link to download the report.
RunnerID:7391486073

github-actions · 2024-01-02T23:18:42Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Path Traversal [6] total: 1:

View the following link to download the report.
RunnerID:7391485294

github-actions · 2024-01-04T19:08:49Z

Site: https://mychildcareservices.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 86:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://mychildcareservices.gov.bc.ca/js/app~12b01a4e.900b378f.js
- Cookie Slack Detector [90027] total: 86:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 12:
- Session Management Response Identified [10112] total: 6:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7413714187

github-actions · 2024-01-11T22:09:34Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Path Traversal [6] total: 1:
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 24:

View the following link to download the report.
RunnerID:7495077587

github-actions · 2024-01-11T22:12:52Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Path Traversal [6] total: 1:

View the following link to download the report.
RunnerID:7495075827

github-actions · 2024-01-15T19:07:15Z

Site: https://test.mychildcareservices.gov.bc.ca
Resolved Alerts
- Path Traversal [6] total: 1:

View the following link to download the report.
RunnerID:7533067718

github-actions · 2024-01-17T17:09:10Z

Site: https://mychildcareservices.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Proxy Disclosure [40025] total: 84:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://mychildcareservices.gov.bc.ca/js/app~12b01a4e.900b378f.js
- Cookie Slack Detector [90027] total: 84:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 12:
- Session Management Response Identified [10112] total: 4:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7559197521

github-actions · 2024-02-06T18:42:16Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- SQL Injection [40018] total: 1:
  - https://test.mychildcareservices.gov.bc.ca/error?message=404_Page_Not_Found+AND+1%3D1+--+
- Content Security Policy (CSP) Header Not Set [10038] total: 4:
- Hidden File Found [40035] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 4:
Resolved Alerts
- Path Traversal [6] total: 1:
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 12:
- Modern Web Application [10109] total: 12:

View the following link to download the report.
RunnerID:7804473844

github-actions · 2024-02-06T18:44:33Z

Site: https://test.mychildcareservices.gov.bc.ca
New Alerts
- Hidden File Found [40035] total: 4:
Resolved Alerts
- Path Traversal [6] total: 1:
- Cross-Domain Misconfiguration [10098] total: 1:
- User Agent Fuzzer [10104] total: 24:

View the following link to download the report.
RunnerID:7804475076

github-actions · 2024-02-13T18:46:17Z

Site: https://mychildcareservices.gov.bc.ca
New Alerts
- CSP: Wildcard Directive [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Cross-Domain Misconfiguration [10098] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Hidden File Found [40035] total: 4:
- Proxy Disclosure [40025] total: 84:
- Sub Resource Integrity Attribute Missing [90003] total: 12:
- Cookie with SameSite Attribute None [10054] total: 3:
- Cookie without SameSite Attribute [10054] total: 1:
  - https://mychildcareservices.gov.bc.ca/api
- Deprecated Feature Policy Header Set [10063] total: 12:
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://mychildcareservices.gov.bc.ca/js/app~12b01a4e.900b378f.js
- Cookie Slack Detector [90027] total: 84:
- Information Disclosure - Suspicious Comments [10027] total: 13:
- Modern Web Application [10109] total: 6:
- Non-Storable Content [10049] total: 12:
- Session Management Response Identified [10112] total: 4:
- User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:7891233090

ZAP Full Scan Report #322

ZAP Full Scan Report #322

Comments

github-actions bot commented May 12, 2023

github-actions bot commented May 25, 2023

github-actions bot commented May 25, 2023

github-actions bot commented Jun 2, 2023

github-actions bot commented Jun 3, 2023

github-actions bot commented Jun 20, 2023

github-actions bot commented Jun 27, 2023

github-actions bot commented Jun 27, 2023

github-actions bot commented Jun 29, 2023

github-actions bot commented Jul 6, 2023

github-actions bot commented Sep 18, 2023

github-actions bot commented Sep 18, 2023

github-actions bot commented Oct 5, 2023

github-actions bot commented Oct 5, 2023

github-actions bot commented Oct 13, 2023

github-actions bot commented Oct 20, 2023

github-actions bot commented Oct 24, 2023

github-actions bot commented Oct 25, 2023

github-actions bot commented Nov 15, 2023

github-actions bot commented Dec 1, 2023

github-actions bot commented Dec 1, 2023

github-actions bot commented Dec 8, 2023

github-actions bot commented Dec 8, 2023

github-actions bot commented Dec 12, 2023

github-actions bot commented Dec 13, 2023

github-actions bot commented Dec 13, 2023

github-actions bot commented Dec 14, 2023

github-actions bot commented Dec 15, 2023

github-actions bot commented Dec 22, 2023

github-actions bot commented Dec 22, 2023

github-actions bot commented Dec 29, 2023

github-actions bot commented Dec 29, 2023

github-actions bot commented Jan 2, 2024

github-actions bot commented Jan 2, 2024

github-actions bot commented Jan 4, 2024

github-actions bot commented Jan 11, 2024

github-actions bot commented Jan 11, 2024

github-actions bot commented Jan 15, 2024

github-actions bot commented Jan 17, 2024

github-actions bot commented Feb 6, 2024

github-actions bot commented Feb 6, 2024

github-actions bot commented Feb 13, 2024