TEST: ZAP Full Scan Report

[dominicwest]

• Site: https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk
  New Alerts

  • Application Error Disclosure [90022] total: 2:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/apply/chargepoint-grant
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/apply/undefined
  • Dangerous JS Functions [10110] total: 1:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/javascript/govuk.js
  • Information Disclosure - Debug Error Messages [10023] total: 2:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/apply/chargepoint-grant
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/apply/undefined
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 11:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk//
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/info/about-us
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/info/accessibility
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/css/e95c8a7eed531dc8.css
  • Content-Type Header Missing [10019] total: 3:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/newsletter/confirmation
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/save-search?fields.grantApplicantType.en-US=1&fields.grantLocation.en-US=1&fields.grantMaximumAward.en-US=1&fields.grantType.en-US=1&from-day=ZAP&from-month=ZAP&from-year=ZAP&href=/grants&searchTerm=ZAP&sortBy=closingDate&to-day=ZAP&to-month=ZAP&to-year=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/subscriptions/confirmation
  • Information Disclosure - Sensitive Information in URL [10024] total: 13:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/newsletter/#?errors%5B%5D=%7B%22field%22:%22user_email%22,%22error%22:%22Enter%20an%20email%20address%20in%20the%20correct%20format,%20like%20name@example.com%22%7D&notification_privacy=on&user_email=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/newsletter/#?errors%5B%5D=%7B%22field%22:%22user_email%22,%22error%22:%22Enter%20an%20email%20address%20in%20the%20correct%20format,%20like%20name@example.com%22%7D&notification_privacy=on&user_email=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/notifications/email-confirmation?email=zaproxy%40example.com
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/subscriptions/#?errors%5B%5D=%7B%22field%22:%22user_email%22,%22error%22:%22Enter%20an%20email%20address%20in%20the%20correct%20format,%20like%20name@example.com%22%7D&grantId=3XZX9r3eEUzcoNUw4iDoCg&grantLabel=uk-tradeshow-access-programme-uktp&grantTitle=UK+Tradeshow+Programme+%2528UKTP%2529&id=uk-tradeshow-access-programme-uktp&notification_privacy=on&user_email=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/subscriptions/#?errors%5B%5D=%7B%22field%22:%22user_email%22,%22error%22:%22Enter%20an%20email%20address%20in%20the%20correct%20format,%20like%20name@example.com%22%7D&grantId=3XZX9r3eEUzcoNUw4iDoCg&grantLabel=uk-tradeshow-access-programme-uktp&grantTitle=UK+Tradeshow+Programme+%2528UKTP%2529&id=uk-tradeshow-access-programme-uktp&notification_privacy=on&user_email=ZAP
    • ..
  • Retrieved from Cache [10050] total: 12:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/chunks/575-3a92d10c228614e0.js
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/chunks/89-0f0f83f6d15ff21e.js
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/chunks/framework-5f4595e5518b5600.js
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/chunks/main-c3832e6f9f50a74f.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 10:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?limit=10&page=2&skip=10
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?limit=10&page=2&skip=10
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?searchTerm=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/info/cookies?cookie_consent=accept&refererSpok=%2Finfo%2Fterms-and-conditions
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/info/cookies?cookie_consent=accept&refererSpok=%2Finfo%2Fterms-and-conditions
    • ..

  Ignored Alerts

  • Absence of Anti-CSRF Tokens [10202] total: 11:
  • Base64 Disclosure [10094] total: 12:
  • Information Disclosure - Suspicious Comments [10027] total: 11:
  • Modern Web Application [10109] total: 11:
  • Non-Storable Content [10049] total: 8:
  • Re-examine Cache-control Directives [10015] total: 2:
  • Storable and Cacheable Content [10049] total: 3:

View the following link to download the report.
RunnerID:5178428148