SSingh011905 (Community Member) asked a question.
CSRF issue reported at read-only class variable
We found below logs in CICD pipeline
----------------------------------
CWE-352: Cross-Site Request Forgery (CSRF): agent-pipeline/src/feature/product/productcontroller.cs:34
namespace SampleProject.Feature.Product.Controllers
{
[ValidateAntiForgeryToken]
public class ProductController : BaseController
{
private readonly ProductContext _productContext = new ProductContext();
...
Issue is reported at above given line. What else can be done to fix this issue?
.png){kind=logo}
Hi @SSingh011905 (Community Member) ,
I would recommend performing a policy scan and reviewing the 'Attack Vector', this may provide more information.
If this does not answer your questions, I would recommend you schedule a consultation call to discuss.
You can check out this knowledge article (https://community.veracode.com/s/article/How-to-schedule-a-consultation-call) on how to schedule a consultation call with us.
Thank you,
Boy Baukema