Skip to content

Conversation

@hazco75
Copy link
Contributor

@hazco75 hazco75 commented Nov 21, 2025

Description

Gestion de l'affichage des erreurs lors de la création et de la mise à jour de métadonnées sur Collecte

@hazco75 hazco75 added this to the IT 162 milestone Nov 21, 2025
@vitam-prg
Copy link
Collaborator

vitam-prg commented Nov 21, 2025

Logo
Checkmarx One – Scan Summary & Details793c71f5-8c99-49fc-92d9-da266497979d

New Issues (72)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
ID: BkDNHEhDkgMUu3hFVYmicl7b7%2FA%3D
Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
ID: 3uqeXXpPfnQ7eObh7UezGRdCnQc%3D
Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
ID: a3vnCXEWy5g7%2BQHo63wlE3ROMaU%3D
Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
ID: hcNLeIfUd4094xn5GvrGGappSiE%3D
Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
ID: Tdt0W4V81QwZLXa0AUV1jUQuqQA%3D
Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
ID: aQXjqR3cbCnuNcWNYjo3iwJJK10%3D
Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
ID: K7AeDIooRofQwqw8%2B5h3qE2snuc%3D
Attack Vector
MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
ID: cDEHHuT8rHSFz0%2FSPftxyZFpVD0%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
detailsMethod updateArchiveUnitsMetadataFromCsvFile at line 166 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/Transaction...
ID: ETuqk0XyQvGEKqGGugGc7CGYshg%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 192
detailsMethod streamingUpload at line 192 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
ID: pAGxMNm14FSIROyLb4o2S9GmH6I%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 191
detailsMethod streamingUpload at line 191 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
ID: lINvv0nHGEeOH1dlbE%2B3KuQtnfc%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 190
detailsMethod streamingUpload at line 190 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
ID: W5akE9%2Fa9s6nlUTWVWpMsUltQ6Y%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
detailsMethod streamingUpload at line 193 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
ID: 59vmf9eDItA5%2BcuSWgkiC9%2BHjtU%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 191
detailsMethod streamingUpload at line 191 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
ID: Jf0Ti1Yw%2Fnin5NN5Dw76Pp%2BI1i0%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
detailsMethod streamingUpload at line 193 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
ID: AOmB3rbMzLQeEJ%2BFBPeb6dM0tGA%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 191
detailsMethod streamingUpload at line 191 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
ID: lTjy5GZz%2F8dfHhaytfKzJZBO9EA%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
detailsMethod streamingUpload at line 193 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
ID: 8Y272980C2U6FdOHyVI41is%2FP8w%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 168
detailsMethod updateArchiveUnitsMetadataFromCsvFile at line 168 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/Transaction...
ID: iECNfHQT4AKO2DF5dCb%2FtGP0fvg%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
detailsMethod updateArchiveUnitsMetadataFromCsvFile at line 166 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/Transaction...
ID: o%2B8cxnPxQwXxELJ1SWQVkx%2FwAsw%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
detailsMethod updateArchiveUnitsMetadataFromCsvFile at line 166 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/Transaction...
ID: LA0L1hkv6aHy%2F3G6Z1SF3RHaxJU%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
detailsMethod downloadSipTransaction at line 201 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.jav...
ID: liGPiubCUtTupMnrMqWoqkrIKoQ%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
detailsMethod downloadSipTransaction at line 201 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.jav...
ID: kYLaYHB456rG7DsnNjciqTOna8k%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
detailsMethod downloadSipTransaction at line 201 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.jav...
ID: FBcz5KB2wAnFjhf8dcRybRWOZAg%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
detailsMethod downloadSipTransaction at line 201 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.jav...
ID: 2IMMkRA2u3%2FlpuwIrCAaZSAv%2Bss%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 281
detailsMethod updateProjectConfiguration at line 281 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.jav...
ID: wBH%2FiHa1MFB62Tup9cPqqasFugY%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 247
detailsMethod updateProjectContext at line 247 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets...
ID: 8n%2B20ObYGWKlK0q5OyV1VRyfZ9Y%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 230
detailsMethod updateProjectDescription at line 230 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
ID: OX6AwTgxB84voSWwZ72TiZZsrjo%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 264
detailsMethod updateProjectAttachments at line 264 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
ID: XLKQa2nb7K7PmsXb6RM0JIObZIY%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
ID: P3qc2vMZINY8UolLnDNwOkXLdW8%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 185
detailsMethod reclassification at line 185 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
ID: orZtsKBaiw4Jl267slFIBj4HlnY%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
ID: 4fern5nImap%2B5FhqWxwbjIWF2N0%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
ID: q86ex%2BQI4wFORVEw6w7oDSNoLVI%3D
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
ID: uCJ2fHUkITzfxXlZiRJrJDIznWY%3D
Attack Vector

More results are available on the CxOne platform

Fixed Issues (22) Great job! The following issues were fixed in this Pull Request
Severity Issue Source File / Package
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 115
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 104
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 157
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 132
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 212
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 192
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 203
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 144
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 145
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 157
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 132
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 104
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 117
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 116
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/OperationController.java: 132
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 190
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 191
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 190
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 189
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 190
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 192
LOW Missing_CSP_Header /ui/ui-frontend/projects/vitamui-library/src/app/modules/components/header/menu/menu.component.html: 23

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR

@hazco75 hazco75 force-pushed the story_15015_csv_errors branch 2 times, most recently from b1799ae to 52a580c Compare December 7, 2025 00:36
@hazco75 hazco75 force-pushed the story_15015_csv_errors branch 3 times, most recently from e4b45ba to 93afa9a Compare December 16, 2025 14:24
@hazco75 hazco75 force-pushed the story_15015_csv_errors branch from 93afa9a to b2d9f0d Compare December 17, 2025 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants