SpotBugs Bug Detector Report

The following document contains the results of SpotBugs

SpotBugs Version is 4.8.3

Threshold is low

Effort is max

Summary

Classes Bugs Errors Missing Classes
25 24 0 4

Files

Class Bugs
com.app.config.SecurityConfig 1
com.app.controller.AuthController 2
com.app.controller.FileController 4
com.app.controller.HelloController 1
com.app.controller.MessageController 5
com.app.controller.ProductController 7
com.app.model.FileEntity 3
com.app.service.impl.FileServiceImpl 1

com.app.config.SecurityConfig

Bug Category Details Line Priority
Disabling Spring Security's CSRF protection is unsafe for standard web applications SECURITY SPRING_CSRF_PROTECTION_DISABLED 30 High

com.app.controller.AuthController

Bug Category Details Line Priority
com.app.controller.AuthController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 50 Low
com.app.controller.AuthController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 33 Low

com.app.controller.FileController

Bug Category Details Line Priority
new com.app.controller.FileController(FileService) may expose internal representation by storing an externally mutable object into FileController.fileService MALICIOUS_CODE EI_EXPOSE_REP2 22 Medium
com.app.controller.FileController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 54 Low
com.app.controller.FileController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 42 Low
com.app.controller.FileController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 30 Low

com.app.controller.HelloController

Bug Category Details Line Priority
com.app.controller.HelloController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 11 Low

com.app.controller.MessageController

Bug Category Details Line Priority
new com.app.controller.MessageController(MessageService) may expose internal representation by storing an externally mutable object into MessageController.messageService MALICIOUS_CODE EI_EXPOSE_REP2 19 Medium
com.app.controller.MessageController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 34 Low
com.app.controller.MessageController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 40 Low
com.app.controller.MessageController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 24 Low
com.app.controller.MessageController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 29 Low

com.app.controller.ProductController

Bug Category Details Line Priority
new com.app.controller.ProductController(ProductService) may expose internal representation by storing an externally mutable object into ProductController.productService MALICIOUS_CODE EI_EXPOSE_REP2 19 Medium
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 34 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 45 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 24 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 29 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 54 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 40 Low

com.app.model.FileEntity

Bug Category Details Line Priority
com.app.model.FileEntity.getProduct() may expose internal representation by returning FileEntity.product MALICIOUS_CODE EI_EXPOSE_REP 62 Medium
new com.app.model.FileEntity(String, String, String, Long, Product) may expose internal representation by storing an externally mutable object into FileEntity.product MALICIOUS_CODE EI_EXPOSE_REP2 45 Medium
com.app.model.FileEntity.setProduct(Product) may expose internal representation by storing an externally mutable object into FileEntity.product MALICIOUS_CODE EI_EXPOSE_REP2 63 Medium

com.app.service.impl.FileServiceImpl

Bug Category Details Line Priority
This API (java/nio/file/Paths.get(Ljava/lang/String;[Ljava/lang/String;)Ljava/nio/file/Path;) reads a file whose location might be specified by user input SECURITY PATH_TRAVERSAL_IN 43 Medium