Search results

CONTRAST: JNDI Injection from "username" Parameter in org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter.doFilter(javax.servlet.ServletRequest,javax.servlet.ServletResponse,javax.servlet.FilterChain)

Status: Open.

#12 In Contrast-Security-OSS/CSR-Helpful-Scripts;

· jason-at-contrast opened on Feb 17, 2026

CONTRAST: Untrusted Deserialization from Request Body on "/api/addresses/import" page

Status: Open.

#11 In Contrast-Security-OSS/CSR-Helpful-Scripts;

· jason-at-contrast opened on Feb 17, 2026

CONTRAST: SQL Injection from "creditCard" Parameter, "shipmentId" Parameter on "/payments" page

Status: Open.

#9 In Contrast-Security-OSS/CSR-Helpful-Scripts;

· jason-at-contrast opened on Feb 17, 2026

CONTRAST: Unsafe Code Execution from Untrusted Sources on "/generate-label" page

Status: Open.

#10 In Contrast-Security-OSS/CSR-Helpful-Scripts;

· jason-at-contrast opened on Feb 17, 2026

CONTRAST: OS Command Injection from Request Body on "/testConnection" page

Status: Open.

#8 In Contrast-Security-OSS/CSR-Helpful-Scripts;

· jason-at-contrast opened on Feb 17, 2026

CONTRAST: Path Traversal from "path" Parameter on "/getphoto" page

Status: Open.

#7 In Contrast-Security-OSS/CSR-Helpful-Scripts;

· jason-at-contrast opened on Feb 17, 2026