Check logs sprint 14.4 - week 2 (04/14)

[johnnyporkchops]

Log review needs to be completed per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

• open tickets for Sprint 14.5

[rfultz]

FEC-CMS:
package.json: 1

• Low: Underscore Arbitrary Code Execution [Snyk: HIGH] Underscore Arbitrary Code Execution (due 4/30/21)  fec-cms#4523

requirements.txt: 9

• 4 x High: Denial of Service (DoS): [Snyk: High] Denial of Service (DoS) due - 05/4/2021 fec-cms#4540 (four alerts, same cause, same remediation… same ticket)
• High: Heap-based Buffer Overflow: [Snyk: HIGH] https://github.com/fecgov/fec-cms/issues/4444 (due 04/03/2021) fec-cms#4549
• Medium: lxml Cross-site scripting (XSS): [SNYK: MEDIUM] lxml Cross-site scripting (Due: 05/20/2021) fec-cms#4509
• Medium: Web Cache Poisoning: [SNYK: MEDIUM] Web Cache Poisoning (Due: 4/25/2021) fec-cms#4426
• Low: Directory Traversal: [Snyk: LOW] Directory Traversal (due 05/04/2021) fec-cms#4363
• Low: Directory Traversal: [Snyk: LOW] Directory Traversal (due 07/02/2021) fec-cms#4548

OPEN-FEC:
package.json: None
requirements.txt: 1

• High: Deserialization of Untrusted Data: [Snyk: Low] Deserialization of Untrusted Data (07/06/21) #4818 (still no remediation path list)

FEC-EREGS:
package.json: None
requirements.txt: 1

• Low: Directory Traversal: [Snyk: Low -Research] Directory Traversal (due 05/04/2021) fec-eregs#563

FEC-PATTERN-LIBRARY:
None

Search logs:
No log results for "user change"

Cloud.gov Dashboard:
9 deployer accounts, same as last week.

Off-boarding:
1 Slack account removed