CX CSRF @ src/main/webapp/admin/adminlogin.jsp [refs/heads/master] #192

CSRF issue exists @ src/main/webapp/admin/adminlogin.jsp in branch refs/heads/master

Method user=request.getParameter at line 11 of src\main\webapp\admin\adminlogin.jsp gets a parameter from a user request from ""username"". This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).

Severity: Medium

CWE:352

Vulnerability details and guidance

Checkmarx

Training
Recommended Fix

Lines: 11 12

Code (Line #11):

     String user=request.getParameter("username");

Code (Line #12):

     String pass=HashMe.hashMe(request.getParameter("password")); //Hashed Password