CustomerPortal React

NodeJS

High

58

Security Factor Score

Exposed

4

Critical Findings

5

High Findings

17

Total Findings

7-Pillar Breakdown

Code

20% weight

Supply Chain

15% weight

Runtime/API

15% weight

Infra/Config

15% weight

Compliance

15% weight

Proactive

10% weight

Observability

10% weight

Application Details

Name	CustomerPortal React
Technology	NodeJS
Repository	https://github.com/contoso/customer-portal
Source Path	/src/customer-portal
Branch	develop
Type	Europe
Business Unit	Customer Experience
Owner	James Chen
Contact	james.chen@contoso.com
Created	Oct 01, 2025
Last Scan	May 31, 2026 19:02

Recent Findings

Critical

AWS Access Key exposed in configuration file

Secrets — Hardcoded Secret

Open

Critical

Reflected XSS in error message display

SAST — Cross-Site Scripting

Open

Critical

SQL Injection in user search query

SAST — SQL Injection

Open

Critical

CVE-2024-30105: .NET denial of service in System.Text.Json

SCA — Vulnerable Dependency

Open

High

Stripe API key found in JavaScript bundle

Secrets — Exposed API Key

Open

High

Unsafe JSON deserialization with TypeNameHandling

SAST — Insecure Deserialization

Open

High

Missing authorization check on admin endpoint

SAST — Broken Access Control

Open

High

S3 bucket allows public read access

IaC — Security Misconfiguration

Open

Dependencies (7)

Package	Version	Vulns
axios	`1.4.0`	1
express	`4.18.2`
jsonwebtoken	`9.0.0`	1
lodash	`4.17.20`	1
marked	`4.0.0`	2
react	`18.2.0`
tar	`6.1.0`	1

Secret Exposures (5)

AWS Access Key

src/config/aws-config.json:8 — AKIA3...HN2Q

API Key (Stripe)

src/lib/stripe.js:15 — sk_live_51...gKlP

Private Key

.ssh/id_rsa:1 — -----BEGIN RSA PRI...

Database Password

src/appsettings.Production.json:5 — Password=Pr0d...x!

JWT Secret

src/config/auth.json:3 — super-se...key123

Scan History

Type	Status	Findings	Critical	High	Duration	Date	Initiated By
Full Scan	Completed	17	4	5	124.0s	Jun 01, 11:02	Schedule
IaC	Completed	0	0	0	71.0s	Jun 01, 03:02	User
Secrets	Completed	0	0	0	128.0s	May 31, 05:02	User
Config	Completed	0	0	0	121.0s	May 31, 00:02	User
SCA	Completed	0	0	0	71.0s	May 30, 20:02	User
SAST	Completed	7	2	2	170.0s	May 30, 13:02	User