Heap_Inspection @ User.java

[nitinp1]

Heap_Inspection issue exists @ User.java in branch main

Method at line 31 of /webgoat-lessons/xxe/src/main/java/org/owasp/webgoat/xxe/User.java defines password, which is designated to contain user passwords. However, while plaintext passwords are later assigned to password, this variable is never cleared from memory.

Namespace: nitinp1
Repository: WebGoat
Repository Url: https://github.com/nitinp1/WebGoat
CxAST-Project: nitinp1/WebGoat
CxAST platform scan: 371cf28e-43c8-4e90-86fa-65d2f0911dc1
Branch: main
Application: WebGoat
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
CWE: 244
Lines: 31

---

References
Read more