CWE-359 on ZAP

Information Disclosure - Information in Browser localStorage

Mon, 01 Jan 0001 00:00:00 +0000

Information was stored in browser localStorage. This is not unusual or necessarily unsafe - this informational alert has been raised to help you get a better understanding of what this app is doing. For more details see the Client tabs - this information was set directly in the browser and will therefore not necessarily appear in this form in any HTTP(S) messages.

Information Disclosure - Information in Browser sessionStorage

Mon, 01 Jan 0001 00:00:00 +0000

Information was stored in browser sessionStorage. This is not unusual or necessarily unsafe - this informational alert has been raised to help you get a better understanding of what this app is doing. For more details see the Client tabs - this information was set directly in the browser and will therefore not necessarily appear in this form in any HTTP(S) messages.

Information Disclosure - Sensitive Information in Browser localStorage

Mon, 01 Jan 0001 00:00:00 +0000

Sensitive Information appears to have been stored in browser localStorage. This can violate PCI and most organizational compliance policies. For more details see the Client tabs - this information was set directly in the browser and will therefore not necessarily appear in this form in any HTTP(S) messages.

Information Disclosure - Sensitive Information in Browser sessionStorage

Mon, 01 Jan 0001 00:00:00 +0000

Sensitive Information appears to have been stored in browser sessionStorage. This can violate PCI and most organizational compliance policies. For more details see the Client tabs - this information was set directly in the browser and will therefore not necessarily appear in this form in any HTTP(S) messages.

PII Disclosure

Mon, 01 Jan 0001 00:00:00 +0000

The response contains Personally Identifiable Information, such as CC number, SSN and similar sensitive data.