diff --git a/.gitignore b/.gitignore index 6b897bb..3836354 100644 --- a/.gitignore +++ b/.gitignore @@ -24,3 +24,4 @@ __debug_bin* vulnapi dist/ +report.json diff --git a/report.json b/report.json deleted file mode 100644 index 22c2e76..0000000 --- a/report.json +++ /dev/null @@ -1 +0,0 @@ -{"$schema":"https://schemas.cerberauth.com/vulnapi/draft/2024-10/report.schema.json","options":{},"curl":{"method":"GET","url":"http://localhost:8080","data":"","headers":{"Authorization":["Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"]},"securitySchemes":[{"type":"http","scheme":"Bearer","in":"header","token_format":"jwt","name":"default"}],"issues":[{"id":"broken_authentication.alg_none","name":"JWT Algorithm None is accepted","url":"https://vulnapi.cerberauth.com/docs/vulnerabilities/broken-authentication/jwt-alg-none?utm_source=vulnapi","cvss":{"version":4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","score":9.3},"classifications":{"owasp":"API2:2023 Broken Authentication","cwe":"CWE-345: Insufficient Verification of Data Authenticity"},"status":"failed"}]},"reports":[{"id":"jwt.alg_none","name":"JWT None Algorithm","startTime":"2024-11-17T18:46:14.75459302+01:00","endTime":"2024-11-17T18:46:15.044591343+01:00","operation":{"id":"getRoot"},"data":{"alg":"none"},"scans":[{"request":{"method":"GET","url":"http://localhost:8080","headers":{"Authorization":["Bearer eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ."],"User-Agent":["vulnapi"]}},"response":{"statusCode":204,"body":"","headers":{"Date":["Sun, 17 Nov 2024 17:46:15 GMT"]}}}],"issues":[{"id":"broken_authentication.alg_none","name":"JWT Algorithm None is accepted","url":"https://vulnapi.cerberauth.com/docs/vulnerabilities/broken-authentication/jwt-alg-none?utm_source=vulnapi","cvss":{"version":4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","score":9.3},"classifications":{"owasp":"API2:2023 Broken Authentication","cwe":"CWE-345: Insufficient Verification of Data Authenticity"},"status":"failed"}]}]} \ No newline at end of file