Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check logs sprint 16.6 - week 2 (12/15/21) #4996

Closed
1 task done
pkfec opened this issue Dec 1, 2021 · 1 comment
Closed
1 task done

Check logs sprint 16.6 - week 2 (12/15/21) #4996

pkfec opened this issue Dec 1, 2021 · 1 comment
Assignees
Labels
Security: general General security concern or issue
Milestone

Comments

@pkfec
Copy link
Contributor

pkfec commented Dec 1, 2021

Log review needs to be completed per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

Ref: Check logs sprint 16.6 - week 1

  • Make new tickets for PI 16 Innovation sprint week 1,2 and 3.
@pkfec pkfec added the Security: general General security concern or issue label Dec 1, 2021
@kathycarothers kathycarothers added this to the Sprint 16.6 milestone Dec 7, 2021
@pkfec
Copy link
Contributor Author

pkfec commented Dec 15, 2021

FEC-CMS:
package.json: None
requirements.txt: 2
[Snyk:High]: [ Cross-site Scripting ] (fecgov/fec-cms#4994)
[Snyk:Medium]: [Access Restriction Bypass] (fecgov/fec-cms#4993)

OPEN-FEC:
package.json: 1
[Snyk: Medium]: [User Interface Misrepresentation of Critical Information] (#5007)
requirements.txt: None
flyway: None

FEC-EREGS:
package.json: None
requirements.txt: 1
[Snyk: Medium]: [Access Restriction Bypass] (fecgov/fec-eregs#638)
requirements-parsing.txt: 3 critical, 10 high, 8 medium

FEC-PATTERN-LIBRARY:
package.json: None

Search logs:
No log results for "User change"

Cloud.gov Dashboard:
9 deployer accounts, same as last week.

Off-boarding:
None for this week

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Security: general General security concern or issue
Projects
None yet
Development

No branches or pull requests

2 participants