
GMohite838554 (Community Member) asked a question.
Flaw Name : "Improperly Controlled Modification of
Dynamically-Determined Object Attributes
(CWE ID 915)"
refer code on details section.
Request you to please respond. Thank you.
[RouteArea("PaymentApprovals")]
[RoutePrefix("")]
public class PaymentsController : BaseController
{
private readonly IEmailOrchestrator _emailOrchestrator;
private readonly IPostingOrchestrator _postingOrchestrator;
private readonly IUserOrchestrator _userOrchestrator;
private readonly IQualityCheckOrchestrator _qualityCheckOrchestrator;
private readonly ILineItemCommentOrchestrator _lineItemCommentOrchestrator;
private readonly IPaymentApprovalControllerModelBuilder _paymentApprovalControllerModelBuilder;
public PaymentsController(IPaymentApprovalControllerModelBuilder paymentApprovalControllerModelBuilder, IUserOrchestrator userOrchestrator,
IEmailOrchestrator emailOrchestrator, IPostingOrchestrator postingOrchestrator, IQualityCheckOrchestrator qualityCheckOrchestrator,
ILineItemCommentOrchestrator lineItemCommentOrchestrator)
{
_paymentApprovalControllerModelBuilder = paymentApprovalControllerModelBuilder;
_emailOrchestrator = emailOrchestrator;
_userOrchestrator = userOrchestrator;
_postingOrchestrator = postingOrchestrator;
_qualityCheckOrchestrator = qualityCheckOrchestrator;
_lineItemCommentOrchestrator = lineItemCommentOrchestrator;
}
.png)
Hi @GMohite838554 (Community Member) ,
This question seems very similar to this question: https://community.veracode.com/s/question/0D52T00004nID63SAG/improperly-controlled-modification-of-dynamicallydetermined-object-attributesflaw-at-constructor
Please consider the answer provided there and let me know if that helped.
Thank you,
Boy Baukema
Hi @Boy, Security Consultant (Veracode)
Can you please help me with the solution.
Hi @Boy, Security Consultant (Veracode) @A.M., Veracode Support (Veracode, Inc.)
I have tried it, but it is not working for me. Can you please help me with anyother solution?
Thanks
Hi @GMohite838554 (Community Member) ,
Unfortunately, the Community email responses are broken which means I'm unable to see replies. My apologies for not seeing your reply.
I would recommend you schedule a consultation call to discuss.
You can check out this knowledge article (https://community.veracode.com/s/article/How-to-schedule-a-consultation-call) on how to schedule a consultation call with us.
Thank you,
Boy Baukema