XS_Parameter_Tampering @ /src/sample.xsjs

[thtri]

XS_Parameter_Tampering issue exists @ sample.xsjs in branch main

The application uses the value from get at /src/sample.xsjs in line 85 as a qualifying parameter when selecting data query at /src/sample.xsjs in line 75. However, the value being used may be tampered with by user-inputs, potentially allowing attackers to bypass access control to retrieve or affect the selected data.

Namespace: thtri
Repository: cx1-test-feedback-app
Repository Url: https://github.com/thtri/cx1-test-feedback-app
CxAST-Project: thtri/cx1-test-feedback-app
CxAST platform scan: d9bb4146-322f-4d77-9ac6-7a858eaa2c1a
Branch: main
Application: cx1-test-feedback-app
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
CWE: 472
Lines: 85

---

References
Read more