citation-bot/progpilot.json at master · ms609/citation-bot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
{
    "false_positives":
[
    {
        "source_name": [
            "$where"
        ],
        "source_line": [
            18
        ],
        "source_column": [
            830
        ],
        "source_file": [
            "src\/authenticate.php"
        ],
        "tainted_flow": [
            [
                {
                    "flow_name": "$where",
                    "flow_line": 85,
                    "flow_column": 3421,
                    "flow_file": "src\/authenticate.php"
                },
                {
                    "flow_name": "$mb_trim_return",
                    "flow_line": 85,
                    "flow_column": 3430,
                    "flow_file": "src\/authenticate.php"
                },
                {
                    "flow_name": "$mb_trim_param0_line85_column3337_progpilot",
                    "flow_line": 85,
                    "flow_column": 3430,
                    "flow_file": "src\/authenticate.php"
                },
                {
                    "flow_name": "$_GET[\"return\"]",
                    "flow_line": 85,
                    "flow_column": 3438,
                    "flow_file": "src\/authenticate.php"
                }
            ]
        ],
        "sink_name": "header",
        "sink_line": 22,
        "sink_column": 989,
        "sink_file": "src\/authenticate.php",
        "vuln_name": "header_injection",
        "vuln_cwe": "CWE_601",
        "vuln_id": "05472fd5549236ba9e3bae384ff6df3657f8514f2221bc3214487ec767048f0b",
        "vuln_type": "taint-style"
    }
,
    {
        "vuln_rule": "MUST_NOT_VERIFY_DEFINITION",
        "vuln_name": "security misconfiguration",
        "vuln_line": 18,
        "vuln_column": 467,
        "vuln_file": "src\/gadgetapi.php",
        "vuln_description": "CORS should not be allowed on all origins",
        "vuln_cwe": "CWE_346",
        "vuln_id": "c44cd39099281596281e5587205e9be86fdb11f9e9c307e2d2eff3f5e6470399",
        "vuln_type": "custom"
    }
]
}