SpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.7.3
Threshold is medium
Effort is default
Summary
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 127 | 300 | 0 | 2 |
Files
org.woehlke.java.simpleworklist.application.listener.ApplicationContextRefreshedListener
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of org/slf4j/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 32 | Low |
org.woehlke.java.simpleworklist.application.listener.ApplicationContextStartedListener
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of org/slf4j/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 32 | Low |
org.woehlke.java.simpleworklist.domain.ApplicationErrorController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 32 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 38 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 96 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 98 | Low |
| Unrestricted Spring's RequestMapping makes the method vulnerable to CSRF attacks | SECURITY | SPRING_CSRF_UNRESTRICTED_REQUEST_MAPPING | 28-102 | High |
| org.woehlke.java.simpleworklist.domain.ApplicationErrorController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 28-102 | Low |
org.woehlke.java.simpleworklist.domain.ContextController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.woehlke.java.simpleworklist.domain.ContextController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 37-45 | Low |
org.woehlke.java.simpleworklist.domain.PagesController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.woehlke.java.simpleworklist.domain.PagesController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 27-28 | Low |
org.woehlke.java.simpleworklist.domain.ProjectIdController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 288 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 290 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 72 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 108 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 125 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 233 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 236 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 241 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 176 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 321-327 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 306-312 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 283-297 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 72-98 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 108-114 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 125-128 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 211-254 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 145-158 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 169-199 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 265-272 | Low |
org.woehlke.java.simpleworklist.domain.ProjectIdTaskController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 192 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 107 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 136 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 149-162 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 175-219 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 64-89 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 100-138 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 246-254 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 283-288 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 230-236 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 264-272 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 299-304 | Low |
org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 163 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 147 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 67 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 99 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 131 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 83 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 179 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 115 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 53-57 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 38-42 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 163-169 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 147-153 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 67-73 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 99-105 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 131-137 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 83-89 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 179-188 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectIdTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 115-121 | Low |
org.woehlke.java.simpleworklist.domain.ProjectRootController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.woehlke.java.simpleworklist.domain.ProjectRootController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 63-78 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 86-92 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 102-109 | Low |
org.woehlke.java.simpleworklist.domain.ProjectRootTaskController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 233 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 235 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 192 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 114 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 131 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 231-244 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 253-266 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 143-159 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 171-220 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 61-94 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 105-133 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 310-320 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 348-356 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 295-301 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 275-286 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 329-339 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 365-373 | Low |
org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 184 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 166 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 76 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 112 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 148 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 94 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 202 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 130 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 234-241 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 219-226 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 184-193 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 166-175 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 76-85 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 112-121 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 60-67 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 43-50 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 148-157 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 94-103 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 202-211 | Low |
| org.woehlke.java.simpleworklist.domain.ProjectRootTaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 130-139 | Low |
org.woehlke.java.simpleworklist.domain.SearchController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 49 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 51 | Low |
| org.woehlke.java.simpleworklist.domain.SearchController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 45-55 | Low |
org.woehlke.java.simpleworklist.domain.TaskLifecycleController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 100 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 112 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 164 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 60-83 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 94-114 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 194-199 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 124-136 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 148-184 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 233-241 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 265-269 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 222-224 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 208-213 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 250-256 | Low |
| org.woehlke.java.simpleworklist.domain.TaskLifecycleController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 278-282 | Low |
org.woehlke.java.simpleworklist.domain.TaskMove2TaskController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 37 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 39 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMove2TaskController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 36-45 | Low |
org.woehlke.java.simpleworklist.domain.TaskMoveController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 155 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 142 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 64 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 90 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 116 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 129 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 77 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 168 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 103 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 192-196 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 180-184 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 38-42 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 155-159 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 142-146 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 64-68 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 90-94 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 51-55 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 116-120 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 129-133 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 77-81 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 168-172 | Low |
| org.woehlke.java.simpleworklist.domain.TaskMoveController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 103-107 | Low |
org.woehlke.java.simpleworklist.domain.TaskStateTabController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 169-170 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 118-119 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 144-145 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 155-156 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 40-41 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 66-67 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 92-93 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 105-106 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 53-54 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 131-132 | Low |
| org.woehlke.java.simpleworklist.domain.TaskStateTabController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 79-80 | Low |
org.woehlke.java.simpleworklist.domain.TestDataController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.woehlke.java.simpleworklist.domain.TestDataController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 32-34 | Low |
org.woehlke.java.simpleworklist.domain.UserChatMessageController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 64 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 68 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 72 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 78 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 115 | Low |
| org.woehlke.java.simpleworklist.domain.UserChatMessageController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 60-93 | Low |
| org.woehlke.java.simpleworklist.domain.UserChatMessageController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 106-126 | Low |
org.woehlke.java.simpleworklist.domain.UserLoginController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.woehlke.java.simpleworklist.domain.UserLoginController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 50-53 | Low |
| org.woehlke.java.simpleworklist.domain.UserLoginController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 70-87 | Low |
| org.woehlke.java.simpleworklist.domain.UserLoginController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 97-103 | Low |
org.woehlke.java.simpleworklist.domain.UserPasswordRecoveryController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 69 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 70 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 71 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 75 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 76 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 77 | Low |
| org.woehlke.java.simpleworklist.domain.UserPasswordRecoveryController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 107-118 | Low |
| org.woehlke.java.simpleworklist.domain.UserPasswordRecoveryController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 139-157 | Low |
| org.woehlke.java.simpleworklist.domain.UserPasswordRecoveryController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 48-50 | Low |
| org.woehlke.java.simpleworklist.domain.UserPasswordRecoveryController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 67-90 | Low |
org.woehlke.java.simpleworklist.domain.UserRegistrationController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 111 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 141 | Low |
| org.woehlke.java.simpleworklist.domain.UserRegistrationController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 110-120 | Low |
| org.woehlke.java.simpleworklist.domain.UserRegistrationController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 140-161 | Low |
| org.woehlke.java.simpleworklist.domain.UserRegistrationController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 46-49 | Low |
| org.woehlke.java.simpleworklist.domain.UserRegistrationController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 66-93 | Low |
org.woehlke.java.simpleworklist.domain.UserSelfserviceController
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 350 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 252 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 379 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 382 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 385 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 389 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 430 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 303 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 172 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 185 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 201 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 78 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 321-332 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 344-359 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 219-231 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 242-264 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 372-395 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 404-412 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 423-443 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 96-105 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 116-130 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 274-283 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 294-310 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 140-149 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 160-209 | Low |
| org.woehlke.java.simpleworklist.domain.UserSelfserviceController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 73-87 | Low |
org.woehlke.java.simpleworklist.domain.db.data.task.TaskServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 44 | Low |
org.woehlke.java.simpleworklist.domain.db.user.account.UserAccountServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 66 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 67 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 68 | Low |
org.woehlke.java.simpleworklist.domain.db.user.passwordrecovery.UserAccountPasswordRecoveryServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 80 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 82 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 90 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 127 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 133 | Low |
org.woehlke.java.simpleworklist.domain.db.user.signup.UserAccountRegistrationServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 83 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 85 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 98 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 135 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 141 | Low |
org.woehlke.java.simpleworklist.domain.meso.chat.UserChatMessageControllerServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 56 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 57 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 58 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 61 | Low |
org.woehlke.java.simpleworklist.domain.meso.project.ProjectControllerServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 55 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 76 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 93 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 94 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 260 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 262 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 206 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 207 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 215 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 225 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 226 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 234 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 243 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 253 | Low |
org.woehlke.java.simpleworklist.domain.meso.task.TaskLifecycleServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 45 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 59 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 75 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 117 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 173 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 155 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 137 | Low |
org.woehlke.java.simpleworklist.domain.meso.task.TaskMove2TaskServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 153 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 154 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 171 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 172 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 122 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 123 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 135 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 144 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 145 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 59 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 72 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 82 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 214 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 228 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 237 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 90 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 91 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 103 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 112 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 113 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 29 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 42 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 51 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 180 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 194 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 198 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 201 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 205 | Low |
org.woehlke.java.simpleworklist.domain.meso.task.TaskMoveServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 131 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 120 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 58 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 79 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 99 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 109 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 69 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 141 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 89 | Low |
org.woehlke.java.simpleworklist.domain.meso.testdata.TestDataServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 38 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 41 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 66 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 67 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 90 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 91 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 92 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 93 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 111 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 112 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 113 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 114 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 132 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 133 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 134 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 154 | Low |
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 176 | Low |
org.woehlke.java.simpleworklist.domain.security.access.UserAuthorizationServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 72 | Low |
org.woehlke.java.simpleworklist.domain.security.login.LoginSuccessHandler
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This use of java/util/logging/Logger.info(Ljava/lang/String;)V might be used to include CRLF characters into log messages | SECURITY | CRLF_INJECTION_LOGS | 56 | Low |