Security Issues Overview - Machdel

The QAOS Security Agent analyzes your web application for vulnerabilities that could be exploited by attackers to steal data, gain unauthorized access, or compromise user accounts.

Issue catalog

Issue ID	Category	Severity
`unauthenticated-resource-access`	Access Control	Critical
`privilege-escalation`	Access Control	Critical
`access-control-method-bypass`	Access Control	Critical
`forced-browsing-direct-url-access`	Access Control	Critical
`default-accounts-present`	Authentication	Critical
`default-credentials-in-dom`	Authentication	Critical
`cookie-token-forgery`	Authentication	Critical
`no-password-spraying-protection`	Authentication	High
`no-login-rate-limiting`	Authentication	High
`compromised-credentials-accepted`	Authentication	High
`weak-password-accepted`	Authentication	Medium
`session-id-in-url`	Session Management	Critical
`user-input-not-filtered`	Injection	High
`hostile-data-used-in-query`	Injection	High
`untrusted-data-concatenation-dynamic-query`	Injection	High
`orm-parameter-extraction-in-url`	Injection	High
`orm-parameter-extraction-in-form`	Injection	High
`misconfigured-security-headers`	Cryptography	High
`misconfigured-cors`	Cryptography	High
`exposed-sensitive-file`	Info Disclosure	Critical
`sensitive-data-logged`	Info Disclosure	High
`server-info-leakage`	Info Disclosure	Medium
`detailed-error-message`	Info Disclosure	Medium
`detailed-error-page`	Info Disclosure	Medium
`local-log-storage`	Info Disclosure	Medium
`log-event-exposure`	Info Disclosure	Low
`user-input-not-validated`	Input Validation	Low