LegacyPayments Java

Java

Critical

51

Security Factor Score

Exposed

4

Critical Findings

5

High Findings

17

Total Findings

7-Pillar Breakdown

Code

20% weight

Supply Chain

15% weight

Runtime/API

15% weight

Infra/Config

15% weight

Compliance

15% weight

Proactive

10% weight

Observability

10% weight

Application Details

Name	LegacyPayments Java
Technology	Java
Repository	https://github.com/contoso/legacy-payments
Source Path	/src/payments
Branch	master
Type	Europe
Business Unit	Finance
Owner	Sarah Miller
Contact	sarah.miller@contoso.com
Created	Jun 01, 2024
Last Scan	May 29, 2026 19:02

Recent Findings

Critical

AWS Access Key exposed in configuration file

Secrets — Hardcoded Secret

Open

Critical

Reflected XSS in error message display

SAST — Cross-Site Scripting

Open

Critical

SQL Injection in user search query

SAST — SQL Injection

Open

Critical

CVE-2024-30105: .NET denial of service in System.Text.Json

SCA — Vulnerable Dependency

Open

High

Stripe API key found in JavaScript bundle

Secrets — Exposed API Key

Open

High

Unsafe JSON deserialization with TypeNameHandling

SAST — Insecure Deserialization

Open

High

Missing authorization check on admin endpoint

SAST — Broken Access Control

Open

High

S3 bucket allows public read access

IaC — Security Misconfiguration

Open

Dependencies (6)

Package	Version	Vulns
com.fasterxml.jackson.core:jackson-databind	`2.13.0`	4
commons-io:commons-io	`2.7`	1
mysql:mysql-connector-java	`8.0.28`	2
org.apache.logging.log4j:log4j-core	`2.17.0`	1
org.apache.struts:struts2-core	`2.5.30`	5
org.springframework.boot:spring-boot-starter-web	`2.7.18`	3

Secret Exposures (5)

AWS Access Key

src/config/aws-config.json:8 — AKIA3...HN2Q

API Key (Stripe)

src/Services/PaymentService.cs:15 — sk_live_51...gKlP

Private Key

.ssh/id_rsa:1 — -----BEGIN RSA PRI...

Database Password

src/appsettings.Production.json:5 — Password=Pr0d...x!

JWT Secret

src/config/auth.json:3 — super-se...key123

Scan History

Type	Status	Findings	Critical	High	Duration	Date	Initiated By
IaC	Completed	0	0	0	102.0s	Jun 01, 15:02	User
Full Scan	Completed	17	4	5	174.0s	May 31, 20:02	Schedule
SAST	Completed	7	2	2	91.0s	May 31, 15:02	User
Secrets	Completed	0	0	0	179.0s	May 31, 08:02	User
SCA	Completed	0	0	0	176.0s	May 30, 16:02	User
Config	Completed	0	0	0	159.0s	May 30, 01:02	User