Yaml

TitleSeverity
Use of Hard-coded Credentialsmedium
Use of GET Request Method With Sensitive Query Stringsmedium
Unintended Proxy or Intermediary ('Confused Deputy')critical
Reliance on Insufficiently Trustworthy Componentmedium
Protection Mechanism Failurelow
Insufficient Control of Network Message Volume (Network Amplification)low
Incorrect Permission Assignment for Critical Resourcemedium
Incorrect Permission Assignment for Critical Resourcemedium
Incorrect Permission Assignment for Critical Resourcemedium
Incorrect Permission Assignment for Critical Resourcemedium
Incorrect Permission Assignment for Critical Resourcelow
Incorrect Permission Assignment for Critical Resourcemedium
Inclusion of Sensitive Information in Source Codelow
Improper Privilege Managementhigh
Improper Privilege Managementlow
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')high
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')medium
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')critical
Improper Control of Generation of Code ('Code Injection')critical
Improper Control of Dynamically-Managed Code Resourcesmedium
Improper Control of Dynamically-Managed Code Resourceslow
Improper Authenticationhigh
Improper Access Controlmedium
Improper Access Controlmedium
Improper Access Controlmedium
Exposure of Sensitive Information to an Unauthorized Actorhigh
Exposure of Sensitive Information to an Unauthorized Actorhigh
Exposure of Sensitive Information to an Unauthorized Actorlow
Exposed Dangerous Method or Functionmedium
Execution with Unnecessary Privilegescritical
Execution with Unnecessary Privilegesmedium
Execution with Unnecessary Privilegeslow
Execution with Unnecessary Privilegeslow
Execution with Unnecessary Privilegesmedium
Execution with Unnecessary Privilegesmedium
Execution with Unnecessary Privilegeslow
Execution with Unnecessary Privilegeslow
Execution with Unnecessary Privilegeshigh
Cleartext Transmission of Sensitive Informationmedium
Cleartext Transmission of Sensitive Informationmedium
Active Debug Codelow