> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qaos.machdel.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Issues Overview

> QAOS detects over 20 security vulnerability categories across access control, cryptography, injection, and more.

The QAOS Security Agent analyzes your web application for vulnerabilities that could be exploited by attackers to steal data, gain unauthorized access, or compromise user accounts.

***

## Issue catalog

| Issue ID                                                                                                              | Category           | Severity                                                       |
| --------------------------------------------------------------------------------------------------------------------- | ------------------ | -------------------------------------------------------------- |
| [`unauthenticated-resource-access`](/issues/security/access-control#unauthenticated-resource-access)                  | Access Control     | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`privilege-escalation`](/issues/security/access-control#privilege-escalation)                                        | Access Control     | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`access-control-method-bypass`](/issues/security/access-control#access-control-method-bypass)                        | Access Control     | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`forced-browsing-direct-url-access`](/issues/security/access-control#forced-browsing-direct-url-access)              | Access Control     | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`default-accounts-present`](/issues/security/authentication#default-accounts-present)                                | Authentication     | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`default-credentials-in-dom`](/issues/security/authentication#default-credentials-in-dom)                            | Authentication     | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`cookie-token-forgery`](/issues/security/authentication#cookie-token-forgery)                                        | Authentication     | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`no-password-spraying-protection`](/issues/security/authentication#no-password-spraying-protection)                  | Authentication     | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`no-login-rate-limiting`](/issues/security/authentication#no-login-rate-limiting)                                    | Authentication     | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`compromised-credentials-accepted`](/issues/security/authentication#compromised-credentials-accepted)                | Authentication     | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`weak-password-accepted`](/issues/security/authentication#weak-password-accepted)                                    | Authentication     | <span style={{color:'#eab308',fontWeight:600}}>Medium</span>   |
| [`session-id-in-url`](/issues/security/session-management#session-id-in-url)                                          | Session Management | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`user-input-not-filtered`](/issues/security/injection#user-input-not-filtered)                                       | Injection          | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`hostile-data-used-in-query`](/issues/security/injection#hostile-data-used-in-query)                                 | Injection          | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`untrusted-data-concatenation-dynamic-query`](/issues/security/injection#untrusted-data-concatenation-dynamic-query) | Injection          | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`orm-parameter-extraction-in-url`](/issues/security/injection#orm-parameter-extraction-in-url)                       | Injection          | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`orm-parameter-extraction-in-form`](/issues/security/injection#orm-parameter-extraction-in-form)                     | Injection          | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`misconfigured-security-headers`](/issues/security/cryptography#misconfigured-security-headers)                      | Cryptography       | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`misconfigured-cors`](/issues/security/cryptography#misconfigured-cors)                                              | Cryptography       | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`exposed-sensitive-file`](/issues/security/information-disclosure#exposed-sensitive-file)                            | Info Disclosure    | <span style={{color:'#dc2626',fontWeight:600}}>Critical</span> |
| [`sensitive-data-logged`](/issues/security/information-disclosure#sensitive-data-logged)                              | Info Disclosure    | <span style={{color:'#f97316',fontWeight:600}}>High</span>     |
| [`server-info-leakage`](/issues/security/information-disclosure#server-info-leakage)                                  | Info Disclosure    | <span style={{color:'#eab308',fontWeight:600}}>Medium</span>   |
| [`detailed-error-message`](/issues/security/information-disclosure#detailed-error-message)                            | Info Disclosure    | <span style={{color:'#eab308',fontWeight:600}}>Medium</span>   |
| [`detailed-error-page`](/issues/security/information-disclosure#detailed-error-page)                                  | Info Disclosure    | <span style={{color:'#eab308',fontWeight:600}}>Medium</span>   |
| [`local-log-storage`](/issues/security/information-disclosure#local-log-storage)                                      | Info Disclosure    | <span style={{color:'#eab308',fontWeight:600}}>Medium</span>   |
| [`log-event-exposure`](/issues/security/information-disclosure#log-event-exposure)                                    | Info Disclosure    | <span style={{color:'#84cc16',fontWeight:600}}>Low</span>      |
| [`user-input-not-validated`](/issues/security/input-validation#user-input-not-validated)                              | Input Validation   | <span style={{color:'#84cc16',fontWeight:600}}>Low</span>      |