CX Input_Path_Not_Canonicalized @ src/main/java/org/cysecurity/cspf/jvl/controller/AddPage.java [master]

[nidhi0512]

Input_Path_Not_Canonicalized issue exists @ src/main/java/org/cysecurity/cspf/jvl/controller/AddPage.java in branch master

Method processRequest at line 39 of src\main\java\org\cysecurity\cspf\jvl\controller\AddPage.java gets dynamic data from the ""filename"" element. This element’s value then flows through the code and is eventually used in a file path for local disk access in processRequest at line 45 of src\main\java\org\cysecurity\cspf\jvl\controller\AddPage.java. This may cause a Path Traversal vulnerability.
Similarity ID: 570160997

Severity: Medium

CWE:73

Vulnerability details and guidance

Checkmarx

Training
Recommended Fix

Lines: 39

---

Code (Line #39):

String fileName=request.getParameter("filename");

---