LPolisetty712934 (Community Member) asked a question.
Improperly Controlled Modification of Dynamically-Determined Object Attributes
flaw at constructor
flaw at constructor
public ClientOperationsController(IServiceProvider serviceProvider) : base(serviceProvider)
{
_clientOperationsService = serviceProvider.GetService<IClientOperationsService>();
_dashboardService = serviceProvider.GetService<ISharedDashboardService>();
_fileUploadService = serviceProvider.GetService<ISharedFileUploadService>();
_httpHelper = serviceProvider.GetService<IHttpHelper>();
}
This flaw is also been shown at similar constructors in the same application,
I dont think Flaw description match in this scenario
.png){kind=logo}
Hi @LPolisetty712934 (Community Member) ,
Veracode Static Analysis should not report constructors for CWE 915, though sometimes missing debugging symbols or the use of async constructs (for which the compiler generates a lot of constructs) may make it difficult for us to give you the correct line number from the binary at is may appear to report the first line, corresponding to the constructor.
Please look at the detailed description for this flaw in the Veracode Platform and verify that the 'Attack Vector' as well as the 'Data Path' both point to the constructor.
If this points to the constructor, please create a case with Veracode Support through the link in the footer of the Veracode Platform ('Contact Support') or through the Veracode Community in the menu on the top right after clicking on your avatar ('Contact Support') and provide the flaw id as well as a link to the Triage Flaws view in the Veracode Platform where the flaw can be found.
Otherwise this should provide you with details for this flaw.
Please let me know if you have any remaining questions or concerns.
Thank you,
Boy Baukema