CX Privacy_Violation @ src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java [refs/heads/master] #188

Privacy_Violation issue exists @ src/main/java/org/cysecurity/cspf/jvl/controller/XPathQuery.java in branch refs/heads/master

Method processRequest at line 50 of src\main\java\org\cysecurity\cspf\jvl\controller\XPathQuery.java sends user information outside the application. This may constitute a Privacy Violation.

Severity: Medium

CWE:359

Vulnerability details and guidance

Checkmarx

Training
Recommended Fix

Lines: 50

Code (Line #50):

            String xPression="/users/user[username='"+user+"' and password='"+pass+"']/name";