Findings
7 open across 3 applications. Fixed findings are retested on every run.
SeverityFindingStatus
- HighBOLA on GET /api/invoices/:idARG-142 · 7be21f0 · 5h agoIn progress
- MediumCSP allows unsafe-inline on /docsARG-117 · e72b114 · 12d agoOpen
- MediumSession cookie lacks Secure on /legacyARG-131 · 0c5d8a3 · 9d agoOpen
- MediumMissing rate limit on POST /auth/resetARG-124 · 9ad41fe · 11d agoOpen
- MediumCORS allows any origin on /v2/publicARG-120 · 9ad41fe · 12d agoOpen
- LowVerbose error on /graphql parse failureARG-098 · e72b114 · 19d agoOpen
- LowCookie "theme" missing SameSiteARG-139 · a1c94e2 · 2h agoOpen
ARG-120 · Introduced in 9ad41feOpen
CORS allows any origin on /v2/public
OWASP A05:2021
CORS allows any origin on /v2/public